feat(search): add list fields endpoint + pagination

[Totodore]

Description

Describe the proposed changes made in this PR.

How was this PR tested?

Describe how you tested this PR.

[github-actions]

Checkmarx One – Scan Summary & Details – d35d4251-8f05-4f1e-b87e-1eabde284e83

---

New Issues (7)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2026-25547	Npm-@isaacs/brace-expansion-5.0.0	details Recommended version: 5.0.1 Description: @isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a ... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
2		CVE-2026-26996	Npm-minimatch-10.1.1	details Recommended version: 10.2.1 Description: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions prior to 3.1.3, 4.0.0 prior to 4.2... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
3		CVE-2025-64718	Npm-js-yaml-4.1.0	details Recommended version: 4.1.1 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml versions through 3.14.1 and 4.x through 4.1.0, it's possible for an attacker to modify t... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
4		Secret_Leak_in_Logs	/quickwit/quickwit-search/src/list_terms.rs: 91	details Method at line 144 of /quickwit/quickwit-search/src/list_terms.rs leaks the secret failed_splits to the log. Attack Vector
5		Cx8bc4df28-fcf5	Npm-debug-3.2.7	details Recommended version: 4.4.0 Description: In NPM "debug" versions prior to 4.4.0, the "enable" function accepts a regular expression from user input without escaping it. Arbitrary regular e... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package
6		Cx8bc4df28-fcf5	Npm-debug-4.3.4	details Recommended version: 4.4.0 Description: In NPM "debug" versions prior to 4.4.0, the "enable" function accepts a regular expression from user input without escaping it. Arbitrary regular e... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package
7		Cxda14f253-4e52	Npm-bluebird-3.7.2	details Description: The package `bluebird` is vulnerable to memory leak, when running the function longStackTraces() with the flag `--expose_gc`. This causes a signifi... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package

---

Fixed Issues (5)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Filtering_Sensitive_Logs	/src/atlassian/jira/JiraClient.py: 152
	Filtering_Sensitive_Logs	/src/atlassian/jira/JiraClient.py: 152
	Filtering_Sensitive_Logs	/src/atlassian/jira/JiraClient.py: 152
	Filtering_Sensitive_Logs	/src/atlassian/jira/JiraClient.py: 152
	Filtering_Sensitive_Logs	/src/atlassian/jira/JiraClient.py: 121

[github-actions]

YARN is no longer allowed. Kindly replace the lockfile using PNPM. Found in ./quickwit/quickwit-ui/yarn.lock