Rate Limiting Tests

10 tests verify request limiting, burst protection, and client identification.

Each client is limited to a configurable number of requests per time window.

Sudden spikes in traffic are detected and throttled to protect backend services.