ACL: level action limits take deletions into account

[AlexTr]

So e.g., set 'photos add' to a max of 5, but if the user deletes one photo, they can upload another

Same issue for UNA: https://github.com/unaio/una/issues/1047