fix(microsoft-ad): allow $search+$filter combo, escape backslashes, fix pagination UX

Second independent 4-agent re-audit of the final state (post security fix)
surfaced 3 more real issues:

- list_users/list_groups threw an error whenever $search and $filter were
  both supplied, claiming Graph doesn't support combining them. It does
  (AND semantics, documented) — the check was blocking valid, documented
  usage for no reason. Removed it.
- The $search term escaping only handled embedded double quotes, not
  backslashes, which Graph's own escaping rule also requires. Fixed the
  replace order (backslashes first, then quotes).
- list_group_members's Group ID field was still hard-required in the
  block UI for every operation including list_group_members, undermining
  the nextLink-only pagination path added earlier (the tool itself no
  longer requires it). Dropped list_group_members from the UI-required
  list, matching the tool's own conditional requirement — the runtime
  "Group ID is required" check still catches a genuinely empty call.

Author: waleedlatif1

apps/sim/blocks/blocks/microsoft_ad.ts

@@ -223,7 +223,6 @@ export const MicrosoftAdBlock: BlockConfig<MicrosoftAdResponse> = {
           'get_group',
           'update_group',
           'delete_group',
-          'list_group_members',
           'add_group_member',
           'remove_group_member',
         ],

apps/sim/tools/microsoft_ad/list_groups.ts

@@ -60,12 +60,9 @@ export const listGroupsTool: ToolConfig<
         '$select=id,displayName,description,mail,mailEnabled,mailNickname,securityEnabled,groupTypes,visibility,createdDateTime'
       )
       if (params.top) queryParts.push(`$top=${params.top}`)
-      if (params.search && params.filter) {
-        throw new Error('$search and $filter cannot be used together in Microsoft Graph API')
-      }
       if (params.filter) queryParts.push(`$filter=${encodeURIComponent(params.filter)}`)
       if (params.search) {
-        const term = params.search.replace(/"/g, '\\"')
+        const term = params.search.replace(/\\/g, '\\\\').replace(/"/g, '\\"')
         queryParts.push(
           `$search=${encodeURIComponent(`"displayName:${term}" OR "description:${term}"`)}`
         )

apps/sim/tools/microsoft_ad/list_users.ts

@@ -57,12 +57,9 @@ export const listUsersTool: ToolConfig<MicrosoftAdListUsersParams, MicrosoftAdLi
         '$select=id,displayName,givenName,surname,userPrincipalName,mail,jobTitle,department,officeLocation,mobilePhone,accountEnabled'
       )
       if (params.top) queryParts.push(`$top=${params.top}`)
-      if (params.search && params.filter) {
-        throw new Error('$search and $filter cannot be used together in Microsoft Graph API')
-      }
       if (params.filter) queryParts.push(`$filter=${encodeURIComponent(params.filter)}`)
       if (params.search) {
-        const term = params.search.replace(/"/g, '\\"')
+        const term = params.search.replace(/\\/g, '\\\\').replace(/"/g, '\\"')
         queryParts.push(`$search=${encodeURIComponent(`"displayName:${term}" OR "mail:${term}"`)}`)
         queryParts.push('$count=true')
       }