Scope batch authoring and lesson moves to the owning resource

Batch and lesson edits now require ownership role, and live classes enforce batch permission checks.