Tests the actual rateLimit middleware with production mode via dynamic import. Covers: under-limit allows, over-limit returns 429, window reset, per-IP isolation, and poll endpoint config (30 req/1s window). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>