Allow passing in token to Personal API Key requests

[yakkomajuri]

Changes

Minimum possible change to address #4849.

With this change, when using personal API keys, you can specify a project to fetch data on by passing the project api key (token) as a query param.

Supporting changes needed:

• Updating plugins that use Personal API Keys to use this mechanism
• Docs

#4764 introduced _get_team_from_request but only the feature flags queryset was updated to leverage this. Now all endpoints will have their queryset filtered by this team.

Checklist

• All querysets/queries filter by Organization, by Team, and by User
• Django backend tests
• Jest frontend tests
• Cypress end-to-end tests
• Migrations are safe to run at scale (e.g. PostHog Cloud) – present proof if not obvious
• New/changed UI is decent on smartphones (viewport width around 360px)

[posthog-bot]

Hey @yakkomajuri! 👋
This pull request seems to contain no description. Please add useful context, rationale, and/or any other information that will help make sense of this change now and in the distant Mars-based future.

[Twixes]

Code looks good, but: test needed :)

[yakkomajuri]

So that's the question - api/feature_flag already has a test for this. Wondering what's the best place to add a "top-level" test? Or would you be for testing each endpoint individually?

@Twixes

[Twixes]

IMO good to just have this tested for a few more endpoints (since it's a global feature)

[Twixes]

Good to go, just documentation in posthog.com needed.