endpoint project filter contracts

Trap: centralizing every project constraint into one query representation looks consistent, but Sentry endpoints accept incompatible filters and malformed combinations can return 400 or wrong scope. Fix: Discover/Events uses project:<slug> via buildProjectQuery(), Replay uses projectSlugs, and Issue index uses its mode-specific project parameter or query syntax; never combine these forms.