Implementing Per-Request Rate Limiting

Enforce limits on individual concurrent streams based on request-scoped identity.