Add missing asset authorization checks for some operations

[abitmore]

Add asset authorization checks for some operations.

Affected operations:

• asset_settle_operation
  • new rule: unable to settle if not authorized by either the debt asset or collateral asset
• bid_collateral_operation
  • new rule: unable to bid (newly bid, or update or cancel existing bid) if not authorized by either the debt asset or collateral asset
• call_order_update_operation
  • new rule: unable to update debt position (create new position, or update or close existing position) if not authorized by either the debt asset or collateral asset
• vesting_balance_create_operation
  • new rule: unable to create the vesting_balance object if either the creator or the receiver is not authorized by the asset
  • note: no asset authorization check on vesting_balance_withdraw_operation since in my opinion it's OK to allow the funds to be moved from vesting balance objects to account balance.

And slightly refactor nearby code for better performance.

Fixes #972, fixes #973.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

100.0% Coverage
0.0% Duplication