fix: address review feedback — NaN safety and pagination guards

- Add Number.isNaN() checks for limit/offset query params to prevent
  NaN propagation to SQL when non-numeric values are passed
- Add MAX_PAGES (100) iteration cap to fetchAllPages to prevent
  unbounded loops if server always returns hasMore: true
- Add Array.isArray() guard on json.data before spreading to prevent
  TypeError if API returns unexpected shape
- Break loop early if data is empty (even if hasMore is true)

Addresses review feedback from Greptile and Cursor bots.

AI Disclosure: This commit was authored by Claude Opus 4.6 (Anthropic),
an AI agent operated by Maxwell Calkin (@MaxwellCalkin).

Author: MaxwellCalkin

apps/sim/hooks/queries/utils/paginated-fetch.ts

@@ -8,27 +8,31 @@
  * @param pageSize - Number of items per page (default 200)
  * @returns All items concatenated across pages
  */
+const MAX_PAGES = 100
+
 export async function fetchAllPages<T>(baseUrl: string, pageSize = 200): Promise<T[]> {
   const allItems: T[] = []
   let offset = 0
+  let pages = 0
   const separator = baseUrl.includes('?') ? '&' : '?'
 
-  while (true) {
+  while (pages < MAX_PAGES) {
     const response = await fetch(`${baseUrl}${separator}limit=${pageSize}&offset=${offset}`)
 
     if (!response.ok) {
       throw new Error(`Failed to fetch from ${baseUrl}: ${response.statusText}`)
     }
 
     const json = await response.json()
-    const data: T[] = json.data
+    const data: T[] = Array.isArray(json.data) ? json.data : []
     allItems.push(...data)
 
-    if (!json.pagination?.hasMore) {
+    if (!json.pagination?.hasMore || data.length === 0) {
       break
     }
 
     offset += pageSize
+    pages++
   }
 
   return allItems