Minor cleanup to the get_or_create_for_level projects API that I noticed during HoAI work: previously we were passing in the scriptLevelId to this API because we used it in conjunction with a provided user ID to verify if the current user had permission to view the given user's project on this level. However, the can?(:view_as_user) function that receives the script level ID only actually uses it for code review-specific scenarios, and otherwise just checks if the given user is a student of the current user. Since the latter conditions is all we care about, we can skip checking the script level ID which simplifies logic in this controller action and simplifies downstream API and function calls.

Testing story

Tested locally that teacher view student work still works as expected, and otherwise users cannot access projects of other users that are not their students.