#997 TenantRateLimiter run-lease methods have no tests

EARS: The run-lease path of engine/policies/tenant_rate_limiter.py shall have unit tests that go red on a sabotaged lease (acquire, release, expiry). Found by #952: the deleted tests covered only the methods moved to TokenGate.