fix(users): remove overly aggressive search validation that broke internal queries

The repository-level object check rejected all object values including
legitimate MongoDB operators ($in, etc.) used by seed and internal code.
NoSQL injection is already prevented at controller boundaries via String()
coercion and key allowlists.

Author: PierreBrisorgueil

modules/users/repositories/users.repository.js

@@ -76,14 +76,7 @@ const get = (user = {}) => {
  * @param {Object} mongoose input request
  * @returns {Array} users
  */
-const search = (input) => {
-  for (const value of Object.values(input)) {
-    if (typeof value === 'object' && value !== null) {
-      throw new Error('Invalid search parameter');
-    }
-  }
-  return User.find(input).exec();
-};
+const search = (input) => User.find(input).exec();
 
 /**
  * @desc Function to update a user in db