Interface SulukRateLimit

RATE-LIMIT facet shape (saastarter-parity Phase 0): the per-operation rate budget an operation DECLARES. Orthogonal to the NORMATIVE spec, which holds rate-limiting out-of-scope (C012 / frontier #43, ceiling 0.74): like x-suluk-cost/access/source this is a vendor extension in the x-suluk-* namespace, never a normative OAS construct. Advisory only — the facet declares the budget; the middleware enforces it.

windowMs + maxRequests are the fixed-window budget, ported from saastarter's checkRateLimit opts (src/lib/effect/rate-limit.ts:16-19). key is the declared key STRATEGY the runtime resolves a concrete key from: only "ip" is saastarter-faithful (it keys by a resolved IP); "principal"/"api-key"/"global" are ORIGINATED extensions (honestly-low ceiling — "principal" keying is gated on the Principal-model decision, roadmap Open-Decision #5, so the Phase-0 middleware implements only "ip" + a caller-supplied override).