Anyone can edit or delete a harvest source they don't own

Anyone can edit or delete a harvest source they don't own: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). I noticed that the harvest source endpoints PUT /api/1/harvest/source/<ident and DELETE /api/1/harvest/source/<ident don't seem to check whether the caller is…

The task

I noticed that the harvest source endpoints `PUT /api/1/harvest/source/<ident>` and `DELETE /api/1/harvest/source/<ident>` don't seem to check whether the caller is actually allowed to touch the source.

Part of FineEnvs/MiMo-V2.6-RL-harbor-code.