RFC 503: Swap out mock permissions checkers

Created by: ryanslade

This should be the final step before enabling sub-repo checking in production.

We need to swap out all places where we're currently using mock checkers, they can be found by looking for implementations of authz.SubRepoPermissionChecker

Known place:

• gitserver client