activitypub: user fetching: use fetch_and_contain_remote_object_from_id()

2 jobs for security/spoofing-hardening in 6 minutes and 56 seconds (queued for 2 minutes and 2 seconds)