a token bucket allows bounded bursts

A token bucket permits short bursts up to its capacity while enforcing a long-run refill rate. Each request spends a token; if none remain, delay or reject it. Keep token state per key and update it atomically under concurrency.