const MAX_STRING_LEN: usize = 1_000;
Defensive caps so a malformed or hostile manifest can’t bloat state or stall the UI. Generous relative to any hand-authored plugin.