Every project is limited to 600 requests per minute per API key. The limit is a
rolling 60-second window.
| Header | Meaning |
|---|---|
| `X-RateLimit-Limit` | Requests allowed in the window |
| `X-RateLimit-Remaining` | Requests left in the current window |
| `X-RateLimit-Reset` | Unix seconds until the window resets |
On a `429 Too Many Requests`, read `Retry-After` (seconds) and wait that long
before retrying. Use exponential backoff with jitter for repeated 429s.