fix(health): 全 handler page_size 上限 100 防止 DoS

22 个 handler 文件统一添加 .min(100) 限制分页大小

crates/erp-health/src/handler/consent_handler.rs

@@ -35,7 +35,7 @@ where
 {
     require_permission(&ctx, "health.consent.list")?;
     let page = params.page.unwrap_or(1);
-    let page_size = params.page_size.unwrap_or(20);
+    let page_size = params.page_size.unwrap_or(20).min(100);
     let result =
         consent_service::list_consents(&state, ctx.tenant_id, patient_id, page, page_size).await?;
     Ok(Json(ApiResponse::ok(result)))