[th/getpwuid-cleanup] cleanup calls to getpwuid

• avoid a call to getpwuid in nm_auth_is_subject_in_acl(), unless necessary
• add helper nm_getpwuid() which exposes the buffers and can avoid cloning the string.
• use nm_getpwuid() (which avoids cloning the string).