## Context `validate()` does not bound `gateway.max_body_size`. Misconfiguration can exhaust server memory. ## Solution Add validation: `gateway.max_body_size <= 10_485_760` (10 MiB). **Epic:** #854 | **Effort:** S | **Crate:** zeph-core
