Review check of asset authorizations for all operations

[abitmore]

There are some checks are missing, that said, limitations e.g. white-listing can be bypassed.

• vesting balances related operations (issue Check asset authorizations and withdrawals in vesting balance related evaluators #972, PR Add missing asset authorization checks for some operations #2468)
  • Note: check asset authorization on creation, but not on withdrawal
• call_order_update_operation / asset_settle_operation / bid_collateral_operation (PR Add missing asset authorization checks for some operations #2468):
  able to create an new MPA backed by restricted asset, and create a short position, then get margin called or force-settled; or to settle if want to move in the other direction.
• others (need to review and add here)
  • Note: for blind transfer operations, transfer_to_blind_operation is not allowed if white_list bit is set, no matter if whitelist authorities or blacklist authorities are set; no asset authorization check for transfer_from_blind_operation or blind_transfer_operation
  • Note: no asset authorization check for asset_claim_fees_operation (when fees are collateral asset)
  • Note: for HTLC operations, check asset authorization on creation only
  • Note: for withdraw permissions, check asset authorization on claim only

[abitmore]

Fixed by #2468.