Keep permission filtering bounded at any ticket count

Replaces linear ticket enumeration in search filters (O(n) with 32k+ bound-variable ceiling) with parametrized permission queries that scale to any table size.