Dry-run mode for incoming sync

### Is your feature request related to a problem?

I have been adjusting my LDAP filter to exclude accounts in a certain OU and seems the filter has not working as expected. Unfortunately `Delete Not Found Objects` was enabled as well, leading to all my users getting deleted - and respectively all MFA devices, consents, etc.

### Describe the solution you'd like

Some way of "grace-period" to mark users as deleted and inactive/disabled, but actually delete them later with some short delay.

### Describe alternatives that you've considered

-

### Additional context

_No response_