Check the account belongs to the caller before reading it

Added ownership checks to `get_mailboxes` and `get_quota` endpoints to prevent unauthorized access to other users' mail accounts.