ListInvestigations lists investigations across the requested
environments — every run, whether submitted through this API or executed
interactively in the web app. Filter by status, creation-time range, or
a name/seed substring; results are one globally-cursored page per call
(pass next_page_token back until it returns empty). Environments the
caller cannot read are skipped; if none remain the call returns
PermissionDenied.