Allow bucket limits for deid / privacy

[mikix]

Data metrics started as a purely internal QA tool that didn't need the privacy guards of bucket-limiting (i.e. ignoring cube rows with less than 10 patients).

But nowadays we are talking about the utility of sharing/aggregating results between sites. So maybe we need them after all.

Probably on by default, and disable-able if you need to?