refactor(frontier): move SearchOrganizationTokens to FrontierService

[paanSinghCoder]

Summary

• Move `SearchOrganizationTokens` RPC from `AdminService` → `FrontierService` so org admins (not only platform super-users) can list their own org's token transactions
• Request/response shape preserved: nested `OrganizationToken` projection + `RQLQueryPaginationResponse` + `RQLQueryGroupResponse`.

Follow-up

A corresponding frontier PR will:

• Bump `PROTON_COMMIT` and regenerate Go protos.
• Swap the `authorization.go` entry from `IsSuperUser` to `IsAuthorized(org, UpdatePermission)`.
• Update the admin dashboard Tokens page from `AdminServiceQueries.searchOrganizationTokens` → `FrontierServiceQueries.searchOrganizationTokens`.
• Rewrite the views-new SDK Tokens page from `listBillingTransactions` (non-RQL, client mode) to `searchOrganizationTokens` with `useInfiniteQuery` + server-mode sort/filter.

Test plan

• `buf build` / `buf lint` pass
• Downstream consumers (frontier Go, @raystack/proton JS) regenerate cleanly

🤖 Generated with Claude Code

[github-actions]

The latest Buf updates on your PR. Results from workflow Validate / validate (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	⏩ skipped	✅ passed	✅ passed	Apr 21, 2026, 8:18 AM

[coderabbitai]

📝 Walkthrough

Walkthrough

The SearchOrganizationTokens RPC endpoint and its associated message definitions (SearchOrganizationTokensRequest and SearchOrganizationTokensResponse) have been relocated from the AdminService to the FrontierService in the Frontier API protobuf definitions. The SearchOrganizationTokensResponse includes nested OrganizationToken messages containing token metadata including amount, type, description, user information, creation timestamp, and organization ID. No functional changes to the endpoint behavior or message structure were made; this is a migration of the API surface between services.

Suggested reviewers

• rsbh
• whoAbhishekSah
• AmanGIT07

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: moving SearchOrganizationTokens RPC from AdminService to FrontierService, which matches the changeset exactly.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description check	✅ Passed	The PR description clearly explains the purpose of moving SearchOrganizationTokens from AdminService to FrontierService, directly relating to the changeset shown in the raw summary.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}