feat(indexer): cap files per index pass

Bound a single index pass to CONTINUUM_MAX_FILES (default 50000, 0
disables). A workspace rooted at a huge tree no longer loads unbounded
symbols, tokens, and embeddings into memory; truncation is logged.