Async resource throttling by explicit key.
This crate decides whether a keyed access is allowed now and how long the caller must wait otherwise. It does not schedule jobs, retry requests, or infer business scopes.