Minor fix to 2461607: skip ACL check if dry run.

In addition to just the general fact that we should avoid contacting the
API server as much as possible when --dry-run is specified,
dx-run-app-locally calls "dx build --dry-run" and we should try hard to
make that a local-only operation.