internal/authz: remove potentially expensive conf check in SubRepoPermsClient

Created by: bobheadxi

Callers should do the check themselves - having it inside SubRepoPermsClient means potentially fetching conf very frequently in tight loops, e.g. when iterating over a set of files for permissions