Adding a rate-limit policy

Any organization exposing APIs to customers, partners, or internal teams needs to safeguard their services from being overwhelmed by too many requests at once, whether caused by sudden demand spikes, misconfigured applications, or abusive traffic. Rate limiting ensures the API remains reliable, cost-effective, and accessible to all intended users.