Rate limits

Each credential is limited to 120 requests per minute. Responses include X-RateLimit-* headers; 429 includes Retry-After.

Usage is audited in Govern (GET /api/v1/partner/usage) with page sizes 20 / 50 / 100 (max 100).