Fetch all Account API pages for feature flags and permissions #212

Summary

Fetch all Account API pages when retrieving feature flags and permissions.

Requested by @KomanRudden as a follow-up to PR #206. The requester reports that first-page-only behavior already exists on main and should remain outside the scope of that PR.

Problem

The generated Account API endpoints default to ten results and support starting_after pagination. The SDK currently processes only the first response. This can omit feature flags and permissions on later pages. A permission lookup can therefore incorrectly return isGranted: False.

Required changes

• Update FeatureFlags._call_account_api in kinde_sdk/auth/feature_flags.py to retrieve subsequent pages before returning the flag mapping or a requested flag.
• Update the Account API permission flow in kinde_sdk/auth/permissions.py to retrieve subsequent pages before extracting permission keys and checking membership.
• Use the pagination metadata and starting_after contract exposed by the generated endpoints. Stop when no further page is available.
• Preserve response normalization and sanitized error logging.
• Add regression tests for multi-page responses and lookups for entries on later pages.

Acceptance criteria

• Collection requests return feature flags and permissions from every page.
• A feature flag on a later page can be retrieved by its code.
• A permission on a later page is reported as granted.
• Missing flags and permissions retain the existing fallback behavior.
• Tests cover empty responses, single-page responses, multi-page responses, and pagination termination.
• Pagination does not expose tokens, session data, or raw API error bodies in logs.

References

• PR: fix: stop leaking secrets through logs and session storage #206
• Review thread: fix: stop leaking secrets through logs and session storage #206 (comment)