test(approvals): the wall-clock pin's find double honours the caller's limit

The read-and-append engine double answered a `limit: 1` read with every row;
`check:objectql-double-limit` names that shape limit-blind. The bound is now
applied by presence, after the filter.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GDA48PuRFrHyRfdkBz8m21

Author: claude

packages/plugins/plugin-approvals/src/approval-service-sla-calendar-clock.test.ts

@@ -63,7 +63,11 @@ function makeEngine() {
   return {
     _tables: tables,
     async find(object: string, options?: any) {
-      return ensure(object).filter((r) => matches(r, options?.filter ?? options?.where));
+      const rows = ensure(object).filter((r) => matches(r, options?.filter ?? options?.where));
+      // Honour the caller's bound by presence, after the filter — the shape
+      // `check:objectql-double-limit` pins, so a `limit: 1` read cannot be
+      // silently answered with every row.
+      return typeof options?.limit === 'number' ? rows.slice(0, options.limit) : rows;
     },
     async insert(object: string, data: Row) { ensure(object).push({ ...data }); return { ...data }; },
     async count(object: string) { return ensure(object).length; },