Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: SurbhiAgarwal1

internal/fnruntime/celeval.go

@@ -83,8 +83,8 @@ func NewCELEvaluator(condition string) (*CELEvaluator, error) {
 			return nil, fmt.Errorf("CEL expression must return a boolean, got %v", ast.OutputType())
 		}
 
-		// Create the program with cost tracking enabled (no hard limit enforced)
-	prg, err := env.Program(ast,
+		// Create the program with a hard cost limit and cost tracking enabled
+		prg, err := env.Program(ast,
 			cel.CostLimit(costLimit),
 			cel.InterruptCheckFrequency(checkFrequency),
 			cel.CostTracking(&k8scellib.CostEstimator{}),