Current ACL/auth reads assume <1000 rows. Add paginated helpers and adopt in ACL evaluator and related high-risk lookups.