Per-IP isn't enough for an AI gateway. How to size your MCP rate limits for DoS, free-tier abuse, and per-tenant fairness, with worked examples.