fix: cap email trigger UID fetch and use teamCtx for audit events

Cap UIDs fetched per poll cycle to 200 to prevent memory exhaustion on
large mailboxes. Fix audit event in fireWorkflow to use teamCtx (which
carries TeamID) instead of the bare ctx.

Note: go-imap v2 client.Store() already issues UID STORE automatically
when passed an imap.UIDSet (via uidCmdName dispatch) — no UIDStore method
exists in this API version.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: michaelmcnees

internal/server/email_trigger.go

@@ -309,12 +309,23 @@ func (e *EmailTriggerPoller) poll(ctx context.Context, t TriggerRecord, client *
 		return err
 	}
 
+	const maxEmailsPerPoll = 200
+
 	uids := searchData.AllUIDs()
 	if len(uids) == 0 {
 		metrics.EmailPollDuration.WithLabelValues(t.WorkflowName, folder).Observe(time.Since(start).Seconds())
 		return nil
 	}
 
+	// Cap to avoid memory exhaustion on large mailboxes.
+	if len(uids) > maxEmailsPerPoll {
+		e.server.Logger.Warn("email poller: truncating UID list",
+			"trigger_id", t.ID,
+			"total_uids", len(uids),
+			"processing", maxEmailsPerPoll)
+		uids = uids[:maxEmailsPerPoll]
+	}
+
 	// Fetch envelope + body text for each message.
 	var uidSet imap.UIDSet
 	for _, uid := range uids {
@@ -409,7 +420,7 @@ func (e *EmailTriggerPoller) fireWorkflow(ctx context.Context, t TriggerRecord,
 		"uid", uid)
 
 	if e.server.Auditor != nil {
-		_ = e.server.Auditor.Emit(ctx, audit.Event{
+		_ = e.server.Auditor.Emit(teamCtx, audit.Event{
 			Actor:  "email-poller",
 			Action: audit.ActionEmailTriggerFired,
 			Resource: audit.Resource{