flattenlistmodel: Make the constructor transfer full

This is for consistency with other wrapping list constructors. We want them all to be transfer full, allow-none.

Update all callers.