List network interfaces (ports) in the active scope

Returns the Network Interface (port) collection for the active tenant/subscription/project scope, exactly as rendered by the Interfaces page on route load. This single operation also serves the search/filter/sort/paginate behavior (canonical id network.network_interface.search_filter_sort collapses here): the free-text q is a case-insensitive substring match over name, fixed IP, MAC, network name, subnet name and attached-device name; the UI quick-filter chips map to attachment=attached|unattached (device bound or not) and portSecurity=false ("Port security off"); status narrows to a port lifecycle state. Sortable columns are name, network, ip, sgs (security-group count) and created. Each row carries the stable identifiers and state the table needs (id, name, network/subnet, fixed IP, MAC, security-group ids, status pill, floating IP, device, createdAt). Read-model only — never mutates the resource. Validation: scopeId must resolve to a scope the caller can read; page/pageSize must be positive integers; unknown sort column, bad order, an attachment value outside attached|unattached, a non-boolean portSecurity, or a status outside the declared enum → ERR_VALIDATION (422). Async & state: Synchronous read; no state change. Errors: 401 when the session is missing/expired; 403 when the caller lacks reader access to the scope; 422 on malformed query parameters; 500 on backend read-model failure. Idempotency/Concurrency: Safe, cacheable; no idempotency key required.