Optimize the access control checks.

• List owner check doens't need to set is_list_moderator as that is a separate API call to fetch the moderator roster.
• Use the fields API in Core to fetch only the Member's email since we don't need any other field to check the Memerbship.
• Pass the list object instead of list_id so set_list_access_props doesn't have to fetch List object twice when checking memberhsip of a moderator.