Bounded-by-construction pagination primitive + lint enforcement
Make the shared list-read helper safe-by-default (clamp to a max page size) and enforce a single sanctioned path, so a list read can never silently return a whole collection.
Make the shared list-read helper safe-by-default (clamp to a max page size) and enforce a single sanctioned path, so a list read can never silently return a whole collection.