The caps a form read is held to: the app's security.limits.form, then the route's overrides.
security.limits.form
import type { FormLimitsOptions } from "@shadow-js/dusk/server";
type FormLimitsOptions = Partial<FormLimits>