16971 work package forms endpoint

[``* `#16971` Work package forms endpoint for API V3``](https://community.openproject.org/work_packages/16971)
How is it prevented that clients provide a status that is not valid given the current user & status & type? Validations copied from the work package?