Refacto load all functions

Unbounded LoadAll* loaders materialised an entire result set in one
query with no ceiling. A table that is small in development can grow
without bound in production, so these loaders were a latent memory
and query-time hazard.

Remove the LoadAll* methods from pkg/coredata and walk the cursor-
paginated LoadBy* siblings instead through a shared page.LoadAll
helper. The helper advances a MaxCursorSize forward cursor until the
result set is exhausted and concatenates the pages. It caps a single
call at MaxLoadAllPages (20) batches of 500 rows and errors past that
rather than materialising an unbounded set, so a runaway caller fails
loudly instead of exhausting memory.

Callers that genuinely need every row now express that explicitly,
and the coredata load-naming rule and docs are updated to discourage
new unbounded loaders.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>

pkg/cookiebanner/tracker_mapping_worker.go

@@ -29,6 +29,7 @@ import (
 	"go.probo.inc/probo/pkg/coredata"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/llm"
+	"go.probo.inc/probo/pkg/page"
 	"go.probo.inc/probo/pkg/stringsx"
 	"go.probo.inc/probo/pkg/thirdparty"
 	"go.probo.inc/probo/pkg/uri"
@@ -1216,15 +1217,23 @@ func (h *trackerMappingHandler) prepareOrgThirdParty(
 
 	firstLevel := 1
 
-	var orgThirdParties coredata.ThirdParties
-	if err := orgThirdParties.LoadAllByOrganizationID(
+	orgThirdParties, err := page.LoadAll(
 		ctx,
-		conn,
-		scope,
-		tp.OrganizationID,
-		coredata.NewThirdPartyFilter(nil, &firstLevel, nil),
-	); err != nil {
-		return prep, fmt.Errorf("cannot load org third parties: %w", err)
+		page.OrderBy[coredata.ThirdPartyOrderField]{
+			Field:     coredata.ThirdPartyOrderFieldName,
+			Direction: page.OrderDirectionAsc,
+		},
+		func(ctx context.Context, cursor *page.Cursor[coredata.ThirdPartyOrderField]) ([]*coredata.ThirdParty, error) {
+			var batch coredata.ThirdParties
+			if err := batch.LoadByOrganizationID(ctx, conn, scope, tp.OrganizationID, cursor, coredata.NewThirdPartyFilter(nil, &firstLevel, nil)); err != nil {
+				return nil, fmt.Errorf("cannot load org third parties: %w", err)
+			}
+
+			return batch, nil
+		},
+	)
+	if err != nil {
+		return prep, err
 	}
 
 	ranked := thirdparty.RankCandidates(prep.commonParty, prep.commonDomains, orgThirdParties)