Second-pass fixes: per-IP rate limits for scratch pushes, quota refusal after disable/expiry/report handling, guarded claim rollback with metering moved only on success, early tee cancel, meter on upstream errors, rate-limit before reading uploads, registrable-domain cookies on custom domains
7 files changed+52−21
Rendering diff…