[api] simplify /published controller, do project listing via source controller now