Harmonize watchers endpoints

## OpenProject Work Packages

* https://community.openproject.org/work_packages/17755
* includes non WP specifications that harmonize the API

## Content

* new endpoint for current watchers of a work package
* clarification on when to return 404 and 403 for some endpoints
    * this change *should* not affect the actual implementation, however I did not verify that
* allow adding multiple watchers at once
* endpoint for available watchers is now also placed under a project scope

## Changes to existing endpoints

* watchers are linked in Work Package
* the `watch` link of the work package has an updated `data` section
* embedding format of watchers changes (real collection)
* add watchers now accepts a new request format
* add watchers now returns the list of current watchers
* the available watchers endpoint was moved into a per project scope
This phrase is hard to understand. My understanding is that you need the ```view work package``` permission in order to get the 403 on a work package for which you are lacking the ```edit work package``` permission. Otherwise a 404 is returned. Correct?