fix(soup): file assoc cursor

[seanaye]

Summary

This PR fixes a recursion depth limit when deserializing large cursor values.

To prevent DOS attacks we set an upper size limit of 16kb for deserializing cursors with an unbounded recursion depth.

We also greatly reduce the json key sizes for cursors which is a non-breaking change because they are opaque to the client.

There are new errors to tell the client if the cursor is too big, and there is a unit test to assert the assoc:other filter cursor deserializes

• fix filter deserialize with large values
• update tests

Screenshots, GIFs, and Videos