Drop-in API rate limiting

Create a project, add a rate-limit rule, then send traffic at the proxy URL. The first N requests pass; the rest get a proper 429 with Retry-After and X-RateLimit-* headers.

Projects