MAX_LIMIT

Hard ceiling on limit for recall/list. An MCP caller is external and its limit arrives as whatever number the client model wrote, so the bound is enforced here rather than trusted. Mirrors the MAX_TOP_K that com.embabel.dice.query.discovery.RetrievalRouter clamps to — that one is private, so the value is duplicated rather than referenced.