Enforce can_modify_course on generic API doors

LMS Course permissions now apply to read, write, delete and share endpoints, not just 11 dedicated API paths.