16770 work package api patch for subject

[``* `#16770` Work package API PATCH for subject``](https://community.openproject.org/work_packages/16770)

This PR applies the specified behavior outlined in #2056.
I tried stubbing this call with ``allow(Setting).to receive(:login_required).and_return(1)`` but that didn't work.