Zod validation library exposes denial-of-service risk in .refine() method

Zod's .refine() validation method executes on every input without limits, creating denial-of-service vector.