Currently, apply_devicelist_update requires a device list validator, and also has side effects (removes device data when it's removed from the list).
Usually we want this, but there are usecases when either of them is not needed - when these actions are performed externally.

Depends on D12588

Commtest. Confirmed that UpdateDeviceList RPC still works as expected - validates the device list and removes device data.