[api] remove package and project from event subscription

It was never used and we came to the conclusion we can't and don't
want to support per package subscriptions, but make use of filters
for the same - it's more powerful
[api] test that previous commenters get mails