fix(SEC-WEB-32+34): Add input maxLength limits + API request timeout

SEC-WEB-32: Added maxLength to form inputs (names: 100, descriptions: 500,
emails: 254) in WorkspaceSettings, TeamSettings, InviteMember components.

SEC-WEB-34: Added AbortController timeout (30s default, configurable) to
apiRequest and apiPostFormData in API client.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/web/src/components/team/TeamSettings.tsx

@@ -74,6 +74,7 @@ export function TeamSettings({ team, onUpdate, onDelete }: TeamSettingsProps): R
               setIsEditing(true);
             }}
             placeholder="Enter team name"
+            maxLength={100}
             fullWidth
             disabled={isSaving}
           />
@@ -85,6 +86,7 @@ export function TeamSettings({ team, onUpdate, onDelete }: TeamSettingsProps): R
               setIsEditing(true);
             }}
             placeholder="Enter team description (optional)"
+            maxLength={500}
             fullWidth
             disabled={isSaving}
           />