#16 [MEDIUM] Rate limiter token consumed outside main transaction

FIXED: Complete lease-based rate limiting implementation. 1. highway_0.0.35_rate_limiter_leases.sql: consume_rate_token(), release_rate_token(), cleanup_expired_rate_leases() 2. tenant_rate_limiter.py: consume_with_lease(), release_lease(), cleanup_expired_leases() 3. orchestrator.py: Updated to use lease-based consumption keyed by run_id Token recovery: If process crashes, lease expires and cleanup_expired_rate_leases() recovers the token.