Only accept changes from work packages if they pass the filter

Nobody has claimed this yet.

Currently we are accepting all changes from work packages. We should probably test whether inserted/updated rows from a work package would pass the filtering. If not, we would reject such changes. Any rejected changes would need to be stored somewhere in the master Mergin project. There is a risk with rejections that the invalid edits could be unintended (e.g. the "team" column value would be NULL instead of the expected). Another option would be that instead of rejecting such edits, we would modify such insert/update statements to pass the filtering.

No files, tests, or entry points are named. Trace how work-package insert and update statements are applied to the master Mergin project, then determine whether rejected changes should be stored or edits should be modified to pass filtering. Done requires an agreed behavior for invalid edits and coverage of the chosen behavior.

Written by the indexing model from the issue text.