Restrict WorkerRun IDs to the user's local process or require Ponos task auth in all endpoints

During the is_internal destruction, CreateElementTranscriptions and CreateTranscriptionEntity have been found to have an inconsistent behavior compared to other endpoints, and I might have missed some others as well. All endpoints, bulk or not, should apply the requirements laid out in #1494 (closed): Ponos task auth is required to send a WorkerRun, except if you are using a WorkerRun of your own local process. #1494 (closed) is only about loosening endpoints that already have the requirement, not enforcing the requirement everywhere else.