{"agent":"claude","input":"Add rate limiting to this ASP.NET Core API. Read global.json, Directory.Build.props, Directory.Packages.props, src/Conduit/Program.cs, src/Conduit/ServicesExtensions.cs, src/Conduit/Infrastructure/Errors/ErrorHandlingMiddleware.cs, src/Conduit/Features/Users/UsersController.cs, Login.cs, src/Conduit/Infrastructure/Security/JwtIssuerOptions.cs, tests/Conduit.IntegrationTests/ApiFactory.cs and ApiTests.cs, the Makefile and AGENTS.md first. Use the framework's Microsoft.AspNetCore.RateLimiting middleware and add no package. Define an auth policy, a fixed window partitioned by client address, on POST users and POST users/login, and a write policy, a sliding window partitioned by the sub claim for authenticated requests and by address otherwise, on the endpoints that create or change data. Reject with 429, the same errors JSON shape the error middleware writes, and a Retry-After header. Read the limits from a RateLimiting configuration section with sensible defaults. Register the middleware after authentication. Add integration tests that lower the limit through ApiFactory settings and assert the 429 response and the reset. Run dotnet run --project build/build.csproj -- test and make test-hurl-with-managed-server in the sandbox, fix anything until both pass, and open a pull request that lists the policies, their defaults and how to change them.","resources":[{"url":"https://github.com/your-org/your-app"}]}