feat: add user search/filter, banned metric, mobile review API, event detail improvements

- admin_api/views.py: Add banned count to UserMetrics, fix server-side search/filter in UserListView
- admin_api/models.py: Add ReviewInteraction model, display_name/is_verified/helpful_count/flag_count to Review
- mobile_api/views/reviews.py: Customer-facing review submit/list/helpful/flag endpoints
- mobile_api/urls.py: Wire review API routes
- mobile_api/views/events.py: Event detail and listing improvements
- Security hardening across API modules

partner/api.py

@@ -58,7 +58,7 @@ def _partner_to_dict(partner, request=None):
     # Add document file URL if exists
     if partner.kyc_compliance_document_file:
         if request:
-            data["kyc_compliance_document_file"] = request.build_absolute_uri(partner.kyc_compliance_document_file.url)
+            data["kyc_compliance_document_file"] = partner.kyc_compliance_document_file.url
         else:
             data["kyc_compliance_document_file"] = partner.kyc_compliance_document_file.url
     else:
@@ -168,7 +168,7 @@ def _build_kyc_documents(partner, request):
     name = f"{type_label} - {partner.name}"
     if partner.kyc_compliance_document_file:
         if request:
-            url = request.build_absolute_uri(partner.kyc_compliance_document_file.url)
+            url = partner.kyc_compliance_document_file.url
         else:
             url = partner.kyc_compliance_document_file.url
     else:
@@ -854,7 +854,7 @@ def _user_to_dict(user, request=None):
     # Add profile picture URL if exists
     if user.profile_picture:
         if request:
-            data["profile_picture"] = request.build_absolute_uri(user.profile_picture.url)
+            data["profile_picture"] = user.profile_picture.url
         else:
             data["profile_picture"] = user.profile_picture.url
     else: