Use INSERT WITH CHECK and UPDATE USING to allow owner-on-create but block owner transfers

Use separate PostgreSQL row-security policies for INSERT and UPDATE so a row can be created with an owner and later edited without making the owner column mutable.