Use new auth filter in notes

Description

The notes query uses the legacy authorization filtering by project ids (global search) and traversal_ids and rejected project list (group search). This is known to produce large, inefficient global and group Elasticsearch queries.

Proposal

Change the query to use by_search_level_and_membership filter and update specs accordingly. This should be introduced behind a feature flag.