fix(rpc): use External origin for raw txs and enforce blockHash in filter changes

[gakonst]

Summary

Two audit fixes for RPC behavior.

Changes

1. eth_sendRawTransaction treated as local origin

BatchTxRequest hardcoded TransactionOrigin::Local for all transactions going through the RPC batch path. This meant eth_sendRawTransaction submissions bypassed non-local admission controls (min priority fee filtering, stricter sender slot limits).

Fix: plumb TransactionOrigin through BatchTxRequest and partition batches by origin. The send_transaction RPC path now submits as External.

2. eth_getFilterChanges ignores blockHash constraints

append_matching_block_logs didn't call filter.matches_block(), unlike matching_block_logs_with_tx_hashes which does. When FilterBlockOption::AtBlockHash was used in filter_changes, logs from multiple blocks could be returned.

Fix: add filter.matches_block() early-return guard to append_matching_block_logs, matching the existing behavior in matching_block_logs_with_tx_hashes.

Testing

cargo test -p reth-transaction-pool --lib batcher  # 4 passed
cargo test -p reth-rpc-eth-types --lib logs_utils  # 9 passed
cargo clippy -p reth-transaction-pool -p reth-rpc -p reth-rpc-eth-types  # clean

[github-actions]

⚠️ Changelog not found.

A changelog entry is required before merging. We've generated a suggested changelog based on your changes:

Preview

---
reth-rpc: patch
reth-rpc-eth-types: patch
reth-transaction-pool: patch
---

Fixed `eth_sendRawTransaction` to use `TransactionOrigin::External` instead of `Local`, and added block hash filtering in `append_matching_block_logs` to prevent processing irrelevant blocks.

Add changelog to commit this to your branch.

[emmajam]

Closing: the batcher origin plumbing was already merged via #21969. The matches_block fix for RETH-392 will be submitted as a separate PR.