internal/authz: remove potentially expensive conf check in SubRepoPermsClient
Created by: bobheadxi
Callers should do the check themselves - having it inside SubRepoPermsClient means potentially fetching conf very frequently in tight loops, e.g. when iterating over a set of files for permissions