Refactor: libcrmcommon: Limit parent scope in pcmk__check_acl()

Also compare against NULL explicitly, and use const more.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>