Potential fix for pull request finding 'CodeQL / Database query built from user-controlled sources'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

apps/app/src/server/service/share-link/validate-share-link.ts

@@ -27,9 +27,10 @@ export async function validateShareLink(
   pageId: string,
 ): Promise<ValidateShareLinkResult> {
   // Query with both _id and relatedPage for single-pass validation
+  // Use $eq to force literal comparisons for untrusted inputs.
   const shareLink = await shareLinkModel.findOne({
-    _id: shareLinkId,
-    relatedPage: pageId,
+    _id: { $eq: shareLinkId },
+    relatedPage: { $eq: pageId },
   });
 
   // Handle not found or page mismatch