Make explicit (config.rs + .env.example) that disabling the per-chapter page cap leaves MAX_REQUEST_BYTES as the sole bound (audit footgun). No behavior change; the thumbnail-source read is already bounded by MAX_FILE_BYTES + decode limits. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>