Capability CSV ceilings (RFC-009 §7.5). Shared between ff-sdk (worker
caps ingress) and ff-scheduler (worker caps ingress); mirrored in
lua/helpers.lua and enforced by lua/scheduling.lua/lua/execution.lua
as defense-in-depth. Inclusive: a CSV exactly CAPS_MAX_BYTES long is
accepted; one byte more is rejected.