Expose more attributes to unauthenticated GET /projects/:id

What does this MR do?

It exposes more attributes to unauthenticated GET /projects/:id.

Are there points in the code the reviewer needs to double check?

Why was this MR needed?

Composer requires the default_branch attribute.

Screenshots (if relevant)

Does this MR meet the acceptance criteria?

• Changelog entry added, if necessary
• Documentation created/updated
• API support added
• Tests
  • Added for this feature/bug
  • All builds are passing
• Review
  • Has been reviewed by UX
  • Has been reviewed by Frontend
  • Has been reviewed by Backend
  • Has been reviewed by Database
• Conform by the merge request performance guides
• Conform by the style guides
• Branch has no merge conflicts with master (if it does - rebase it please)
• Squashed related commits together

What are the relevant issue numbers?

Solves #32300 (moved)