module-access: move EACCES check to pw_check_flatpak
Decisions on whether an application is considered Flatpak sandboxed should be in pw_check_flatpak.
Added the comment from 4169d919 why we consider EACCES as non-sandboxed. This is probably OK as it shouldn't occur on functioning Flatpak setup.