API 429 Errors: Rate Limits, Retry-After, and Safe Retries

Distinguish API rate limits from quota errors, honor Retry-After, add bounded backoff with jitter, and avoid executing side effects twice safely.