16770 work package api patch for subject

[``* `#16770` Work package API PATCH for subject``](https://community.openproject.org/work_packages/16770)

This PR applies the specified behavior outlined in #2056.
I really dislike the references to User.current throughout the system. I believe that the user needs to be provided before validation.