Let client code use UMLCancasObject::subordinates() instead of accessing class member directly.

Make UMLCancasObject::m_List a private variable and replace references
to UMLCancasObject::m_List with UMLCancasObject::subordinates().

This makes it possible to deal with zero pointers in one place.