False positive: go/uncontrolled-allocation-size, even though length is limited via `min` function

A false positive of "Slice memory allocation with excessive size value" in Go (Rule ID: go/uncontrolled-allocation-size).

It's a false positive, because the length of the allocated slice is explicitly limited via the `min` function, so it should not be reported. Link to source code:

https://github.com/fzipp/canvas/blob/9bf9f5531d570cf664d7c0f931b02dd3749f4fce/event.go#L402

```go
const maxTouchListLength = 10
length := buf.readByte()
limitedLength := min(length, maxTouchListLength)
list := make(TouchList, limitedLength)
```

URL to the alert on GitHub code scanning:
https://github.com/fzipp/canvas/security/code-scanning/2

先檢查 go/uncontrolled-allocation-size 查詢，並使用連結 commit 中的 event.go 範例重現該報告。確認受 min 限制的 allocation 已正確處理，且此案例不再產生警示。

由索引模型根據 Issue 內容生成。