SECURITY UPDATE: imap-login excessive memory usage DoS via too many
'(' in IMAP list (ELSCVE-127370)
debian/patches/CVE-2026-42006.patch: move list_count_limit check
and counter increment into imap_parser_open_list() so '(' is what
is actually bounded (the previous CVE-2026-27857 fix only limited
')'). Backport of upstream commit da1438c76b797f.