Users who have purchased credits via Stripe now get elevated limits: 600 RPM (vs 10–60) and a $300/day spend cap (vs $30). The upgrade is automatic — no configuration needed. Personal spend caps set on the profile page still override tier defaults.
Also added IP-level rate limiting to the verify-code endpoint to prevent account creation floods, sharing the same limiter bucket as request-code.