fix(api): configurable body size limits for OpenAPI catch-all route