Rate Limiter

Implement the classic rate-limiting algorithms — fixed window, sliding-window log, sliding-window counter, and token bucket — see where each breaks under bursty traffic, then key them per client.