826c0827dc
Adds 5 dedicated controller cases — paging fields exposed on the JSON, rejections for size>100 / size<1 / page<0 / page>100000, and a captor assertion that the built PageRequest is forwarded to the service. The size>100 case is the load-bearing guard on @Validated at DocumentController — removing the annotation silently reopens the DoS window this PR is meant to close. Adds 5 service cases — fast path uses findAll(Spec, Pageable) (not Sort), propagates page+size to the DB, carries totalElements/totalPages/ pageNumber/pageSize back on the result, and for SENDER sort slices in memory and reports the pre-slice total. Page-beyond-last returns empty content with a correct totalElements (JPA edge case). (#315) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>