Directory listing accepts invalid page numbers

[forgou37]

The GET /api/directory endpoint parses the page query parameter without clamping it to a valid range.

Repro

GET /api/directory?page=-1

Observed:

• page = parseInt("-1") = -1 (truthy, so the || 1 fallback is skipped)
• offset = (-1 - 1) * 20 = -40
• Supabase .range(-40, -21) call returns a database error (500)

Fix

Clamp page to a minimum of 1:

const page = Math.max(1, parseInt(url.searchParams.get("page") || "1") || 1);

[Jorel97]

Submitted PR #307 for this: #307

Scope: clamp invalid/non-positive page query values before calculating the Supabase range so /api/directory?page=-1 falls back to page 1.