Add transition validation event

Add an event (either in preSave() or elsewhere, TBD based on what entity API best practices are) that allows other modules to reject a transition. This is necessary for #2683273: Throw exception in WorkbenchModerationSubscriber when no upstream