16971 work package forms endpoint

[``* `#16971` Work package forms endpoint for API V3``](https://community.openproject.org/work_packages/16971)
Pretty late in the review but we need authorisation here. Only users having the view_work_package permission for project should be allowed.