Cap every DuckDB connection, never above DuckDB's default

Sets a memory limit on every DuckDB connection from the site config or 4 GB, whichever is lower. This stops a large compaction copy from being OOM-killed on insights.frappe.io.