feat(BA-6922): AppConfig fragment search REST v2 API (admin + scoped)

[jopemachine]

Recreates #12930, which GitHub auto-closed after a bad rebase briefly made the branch equal its base (head == base). No code was lost — this is the same branch and commit; only the PR shell is new. The single review thread on #12930 ("scope type doesn't represent public scope") is carried over as an open item below.

📚 Stacked PRs

Part of the AppConfigFragment / AppConfig stack under BEP-1052 (epic BA-5781). This branch is on main and waits on nothing — everything below it has merged. What it does have is downstream PRs that rewrite the very actions this adapter calls, so the order still matters.

Merged below this PR

	PR	why this PR needs it
✅	#12984 — refactor(BA-6948): store app_config_fragments.scope_id as a nullable UUID	the column shape the scope-type filter and scope DTO assume
✅	#12928 — feat(BA-6921): AppConfig fragment write REST v2 API (CRUD)	supplies AppConfigFragmentNode, the adapter, and the app-config-fragments sub-app this PR extends

👉 This PR — feat(BA-6922): fragment search REST v2 (admin + scoped). One net commit on main; mergeable on its own.

Must merge after this PR — both currently branch off main, and both change the action API this PR's adapter calls, so if either lands first this PR stops compiling:

PR	what it changes underneath this PR	fix-up needed here
#13032 — refactor(BA-6922): model the fragment scoped search as a scope action	ScopedSearchAppConfigFragmentAction goes from BaseBulkAction with items: list[SearchableActionTarget] to a BaseScopeAction with a single scope: AppConfigFragmentSearchScope; DomainAppConfigFragmentTarget / UserAppConfigFragmentTarget are deleted	this adapter imports and builds both target types and passes items=targets; the AppConfigFragmentScope DTO (lists of domain/user ids) collapses to one scope
#13037 — refactor(BA-6922): base the app config admin searches on the global action	both fragment search results rename their list field data → items; admin_search moves to GlobalActionProcessor	this adapter reads action_result.data in admin_search and scoped_search; the processor swap is transparent at the call site

Neither is blocked by review here — they are blocked by the fact that their rebase target is this diff. #13032 and #13037 also overlap each other (app_config_fragment/actions/base.py, processors.py — both introduce AppConfigFragmentGlobalAction), so whichever of the two lands second takes a small merge as well.

Sibling, not a dependency

• feat(BA-6556): merged AppConfig REST v2 read API #12377 — feat(BA-6556): merged AppConfig REST v2 read API. Also descends from feat(BA-6921): AppConfig fragment write REST v2 API (CRUD) #12928, but shares no file or symbol with this PR. Either order.

Related — may rename the routes added here

• doc: require an audience qualifier segment in REST v2 URLs #12990 (draft) — doc: require an audience qualifier segment in REST v2 URLs. fix(BA-6922): use the scoped search route shape the convention documents #13035 applied that shape (POST /scoped/search, as scheduling-history already ships) to this branch and was reverted in-branch (03e4e08 → 9f5a619) until the convention is settled. This PR therefore ships POST /search + POST /scoped-search; any rename follows doc: require an audience qualifier segment in REST v2 URLs #12990, not this PR.

Summary

Fragment search REST v2 surface, split out of the write PR (BA-6921, #12928). Two variants:

• POST /v2/app-config-fragments/search — system-wide paginated search (superadmin).
• POST /v2/app-config-fragments/scoped-search — principal-visible search (auth), the REST surface of the visible-fragments query (BA-6810, feat(BA-6810): AppConfigFragment visible-fragments query (repository layer) #12706).

What's included

• DTOs: AppConfigFragmentFilter, AppConfigFragmentOrder, AdminSearchAppConfigFragmentInput, AppConfigFragmentScope, ScopedSearchAppConfigFragmentInput, plus types.py (order field + scope-type filter) and SearchAppConfigFragmentPayload.
• Adapter: admin_search / scoped_search + the filter / order / scope-type query converters.
• REST: the two search routes on the existing app-config-fragments sub-app.

Reuses AppConfigFragmentNode from #12928. No processor change — the admin_search / scoped_search service processors already exist; this PR only adds the API surface.

Open item carried from #12930

AppConfigFragmentScope (scoped-search) takes domain / user id lists but has no way to name the public scope. Whether a scoped search should be able to target public fragments is a design decision left open on the original PR — not resolved here. #13032 answers it downstream by replacing the lists with a single scope_type + scope_id, where public is expressible; this PR keeps the shape it was reviewed with.

🤖 Generated with Claude Code

---

📚 Documentation preview 📚: https://sorna--13020.org.readthedocs.build/en/13020/

---

📚 Documentation preview 📚: https://sorna-ko--13020.org.readthedocs.build/ko/13020/

---

📚 Documentation preview 📚: https://sorna--13020.org.readthedocs.build/en/13020/

---

📚 Documentation preview 📚: https://sorna-ko--13020.org.readthedocs.build/ko/13020/