feat(api-server): user-scoped queries for multi-tenant isolation

[maskarb]

Summary

• Upgrade rh-trex-ai from v0.0.19 to v0.0.23 (auth config consolidation, JWK key rotation fixes)
• Register UserScopeConfig for Sessions, filtering List queries by created_by_user_id with admin role bypass
• Pass actual JWT username via auth.GetUsernameFromContext instead of hardcoded "id" in all 8 List handlers (4 HTTP + 4 gRPC)
• Update code generator template so new plugins get the correct pattern
• Regenerate OpenAPI client with updated generator

User scoping is applied to Sessions only — Projects, ProjectSettings, and Users are not scoped. Project/org-level scoping (likely via org_id from JWT) is deferred to a follow-up.

Blocked on

• Upstream framework PR: feat(services): add user-scoped query filtering via UserScopeConfig openshift-online/rh-trex-ai#30
• Once merged and tagged, replace the local replace directive in go.mod with the published version

Jira: RHOAIENG-52960

Test plan

• go build ./... passes with replace directive
• go vet ./... clean
• All pre-commit hooks pass (gofmt, golangci-lint)
• Integration tests: user A creates sessions, user B lists → sees nothing
• Admin user lists → sees all sessions
• JWT disabled (dev mode) → sees all sessions (backward compat)
• Remove replace directive after upstream merge + tag

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 6943f894-1cad-4bbf-8ea4-056cebf6e3d0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feat/user-scoped-queries

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}