Rate Limits

Per-tier request quotas and burst handling.

Placeholder — concrete limit table per plan lands in a follow-up phase.