7c64cd3c5c
The archived-config reactivation path in createConfig returned before the MAX_CONFIGS_PER_PROJECT check, so re-adding previously archived domains could push a project past the active-config cap (Codex security finding ba873417). The cap check now runs before both the reactivation and the new-row insert. Also raises MAX_CONFIGS_PER_PROJECT from 100 to 500.