Restrict CreateWorker to the repository of a Repository process

Further tightening after #1497 (closed): CreateWorker should only allow creating workers on the repository of the revision of the calling Repository process.

Removing the repository_id from the endpoint is probably easier than introducing the extra check. Please add a unit test that still sends an incorrect repository ID to check that the ID is ignored.