Allow anonymous activities (resolves #819)

What does this PR do?

Allow inbound anonymous activities (those without an ID). Values are constrained to be either a verified string ID or undefined.

Contribution Guidelines By submitting this merge request, you agree to follow our Contribution Guidelines

• I agree to follow this project's Contribution Guidelines
• I have made sure to test this pull request