fix(security): bound completion prompt list to prevent unbounded engine fan-out (#47845)