#685 TXN-02: Race condition in rate limiter token consumption

Location: tenant_rate_limiter.py:72-96. Issue: UPDATE with computation in WHERE clause without FOR UPDATE lock. Multiple workers can read same token count and all consume. Fix: Use SELECT FOR UPDATE NOWAIT before computing availability.