[List] mergeJMAPFilters may produce duplicate inMailbox conditions

## Summary
Merging list + search filters can duplicate `inMailbox` in AND conditions. Probably fine on Stalwart; may be brittle on other JMAP servers.

## Location
- `lib/list-query-utils.ts` — `mergeJMAPFilters`

## Review — **Medium (M5)**