* feat(model): rate limiting * fix(agent): preserve per-model identity in rate limiting and fallback * fix test