fix: replace String.to_atom with String.to_existing_atom

Prevents BEAM atom table exhaustion from unbounded String.to_atom calls.
Detected by panic-attack assail batch scan (2026-03-30).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

lithoglyph/lith-http/lib/lith_http/temporal_index.ex

@@ -86,7 +86,7 @@ defmodule LithHttp.TemporalIndex do
     if map_size(state.indexes) >= @max_indexes do
       {:reply, {:error, :max_indexes_reached}, state}
     else
-      # create_table_name_atom/2 is the ONLY path that calls String.to_atom/1,
+      # create_table_name_atom/2 is the ONLY path that calls String.to_existing_atom/1,
       # and it is guarded by the @max_indexes check above.
       tbl = create_table_name_atom(db_id, series_id)
 
@@ -229,9 +229,9 @@ defmodule LithHttp.TemporalIndex do
 
   # Create a new atom for an ETS table name. Only called from create_index/2
   # after verifying the index count is below @max_indexes.
-  # This is the ONLY place where String.to_atom/1 is permitted.
+  # This is the ONLY place where String.to_existing_atom/1 is permitted.
   defp create_table_name_atom(db_id, series_id) do
-    table_name_string(db_id, series_id) |> String.to_atom()
+    table_name_string(db_id, series_id) |> String.to_existing_atom()
   end
 
   # Look up an existing table name atom. Used by all operations except create_index.

verisimdb/elixir-orchestration/lib/verisim/query/vql_executor.ex

@@ -142,7 +142,7 @@ defmodule VeriSim.Query.VQLExecutor do
     ~w(GRAPH VECTOR TENSOR SEMANTIC DOCUMENT TEMPORAL PROVENANCE SPATIAL)
     |> Enum.filter(&String.contains?(upper, &1))
     |> Enum.map(&String.downcase/1)
-    |> Enum.map(&String.to_atom/1)
+    |> Enum.map(&String.to_existing_atom/1)
   end
 
   # ===========================================================================

verisimdb/elixir-orchestration/lib/verisim/query/vql_type_checker.ex

@@ -308,7 +308,7 @@ defmodule VeriSim.Query.VQLTypeChecker do
   defp normalize_proof_type(_), do: :unknown
 
   defp do_normalize(str) when is_binary(str) do
-    atom = str |> String.downcase() |> String.to_atom()
+    atom = str |> String.downcase() |> String.to_existing_atom()
     if atom in @known_proof_types, do: atom, else: :unknown
   end
   defp do_normalize(atom) when is_atom(atom) do