Fix user denied deletion of its own subprojects

Users can delete its own home project and they can create subprojects
without the parent project being present.

In both cases you would end up having a hierarchy of projects that you
were left out without having permission to do anything on them.

This PR allows a user full control over its subprojects.

Fixes #16328

[backend] add updateinfo.xml/_modulemd.yaml  to productcompose meta

Should have been in commit e1b5b9c7

Fix condition to run apidocs linter

Drop NotificationActionDescriptionComponent

[src/api] Update zeitwerk 2.6.15 → 2.6.16 (patch)

The content is moved to the NotificationHelper and used from
NotificationComponent.

BsRequestActionSourceAndTargetComponent is not removed because it's
still used in the watchlist.

[src/api] Update public_suffix 5.0.5 → 5.1.0 (minor)

[src/api] Update rspec-expectations 3.13.0 → 3.13.1 (patch)

[src/api] Update rubocop-performance 1.21.0 → 1.21.1 (patch)

Make sure '/public/image_templates.xml' is accessible without login

Prefer constants for referencing classes.

Move excerpt to notification helper

This is slightly cleanear design, and wound up being the only nice way to get rid of the magic strings.

This makes navigation and refactoring easier, and will also catch typos and other simple errors.

We're calling `#constantize` on the strings anyhow, so this change is effectively identical in actual usage.

Display no avatars in notification by default

Allow setting logo in the admin config

[src/api] Update sanitize 6.1.0 → 6.1.1 (patch)

Fix excerpt truncation when text is nil

Make it possible to view scmsync'ed package logs

Before we solve the problem with package existing only in the backend
in general, people want to look at build logs for this case...

Fixes #13176

Introduces Webui::Packages::TriggerController

Sometimes the text is nil, for example for a report reason missing.

[backend] Srcdiff: don't hide changed archives if the content is identical

Drop NotificationExcerptComponent

Show them as changed if the archive is different but has the same
(uncompressed) content.

Fixes #13125

[backend] implement slsa provenence v1 support