fix(api): Filter internal trace attributes from results

[nsdeschenes]

Summary

• Apply visibility checks to trace item detail, stats, and ranked attribute endpoints — queries referencing hidden internal attributes return empty results instead of leaking internal data
• Thread include_internal parameter through spans_rpc, occurrences_rpc, and data_export callers
• Add has_hidden_api_attributes() short-circuit in RPCBase.run_table_query() to avoid dispatching RPCs when the query is guaranteed to return nothing useful

Depends on #116091

Test plan

• New tests in test_project_trace_item_details.py, test_organization_trace_item_stats.py, and test_organization_trace_item_attributes_ranked.py

Closes TODO

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ab4a530. Configure here.}

[cursor]

Ranked resolver misses hidden function

Medium Severity

The ranked-attribute flow calls Spans.run_table_query without passing the shared SearchResolver, so hidden API fields referenced only in the percentile function are tracked on a throwaway resolver. has_hidden_api_attributes() on the main resolver stays false and the endpoint can still run full distribution analysis instead of returning empty ranked results.

 

^{Reviewed by Cursor Bugbot for commit ab4a530. Configure here.}

[linear-code]

EXP-966