Refactor protected_ref_access to use active_project_member?
The following discussion from !156664 should be addressed:
- [ ] @jwoodwardgl started a [discussion](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/156664#note_1959399669):
> **note:** we call the same method on line 116. I'm refactoring that method in another MR so will replace with `active_project_member?` after we merge this MR to prevent merge conflicts
issue