Module budget 

Shared retry budget: a lock-free token bucket that bounds retries to a fraction of total traffic, protecting dependencies from retry storms.

Each top-level call deposits tokens; each retry withdraws one. When the bucket is empty, retries are denied even if attempts remain.

Structs

RetryBudget

A shared retry budget. Clone it into multiple policies to share one budget.