API Hardening: Idempotency, Tiered Limits, Sandbox

Safer programmatic publishing: idempotent retries, plan-based rate limits, and a test mode.