Use gsl::owner<T*> in places where clang-tidy suggests it