api: limit group queries to a max of 100 results

[mattrobenolt]

This was entirely unbounded and would result in requests timing out.

[dcramer]

for some reason I thought we had an explicit hard cap on max limit in the paginator -- we should probably add that. I'm ok with it being 100 items.

[mattrobenolt]

Do you want me to make the paginator entirely limited? I can do that instead.

[dcramer]

Yeah -- the only question I have is it feels like we should raise an error when limit > max, but that might regress for some people. Still probably safer.

[mattrobenolt]

I've definitely seen other APIs just silently cap. If you try to do somethign too large, it instead just returns the max results without erroring. In theory, this should all be ok if we don't hard error since if someone were following the cursor, it should work correctly. They'd just have to page more than anticipated.

Going to apply limit at paginator

[dcramer]

will defer to whatever you all think is best here, but +1 on hard cap in paginator (but making it a param so if an endpoint wants to allow a higher cap it can)