Use new auth filter in users
## Description
The users query uses the legacy authorization filtering by using traversal_ids and rejected projects list. This is known to produce large, inefficient global and group Elasticsearch queries.
## Proposal
Change the query to use `by_search_level_and_membership` filter and update specs accordingly. This should be introduced behind a feature flag.
issue