List every app the caller owns or is an active member of.

The route costs THREE statements, and one when the caller has no app. The first joins apps to its owner and outer-joins the caller's membership row. It therefore gives the app, the role and the owner row at once. protected.resolve also reads the owner row. The second reads the channels of every app in the list, and the third reads the pending deploy of every channel in one grouped statement. The route only reads, so it runs on run_read_in_thread.