[api] fix some problems noted in production

- the buildevent can even more payload
- the request events need a "The one who did it."
- avoid crash in request show with issues
[webui] make parameters optional for save_comments

I wonder why this was never hit by the test suite ;(
[webui] restore display of last declined request in rdiff