Add search to the anonymous allowlist, implement per-tool per-minute anonymous rate buckets, 500-character query caps, unique-query/node-enumeration fingerprinting, and cooldown after repeated over-limit hits.

065baa2f-5e85-4237-918f-bda3e1a5f4cf