Add size limits for inline attachment embedding

[careck]

Security Review Recommendation

Source: Krillnotes Security Review v1.0.1 (April 2026)

Description

No size limits exist for inline attachment embedding, which could cause memory spikes when processing very large attachments during sync.

Recommendation

Add configurable size limits for inline attachment embedding. Attachments above the threshold should use streaming or chunked transfer.

Acceptance Criteria

• Size limit added for inline attachment embedding
• Large attachments handled gracefully (error or streaming)