Resolve sessions before rate limiting so keys are per-user, exempt trusted server API key calls and get-session, and raise the GET /organization budget for layout loads. Co-authored-by: Cursor <cursoragent@cursor.com>
Resolve sessions before rate limiting so keys are per-user, exempt trusted server API key calls and get-session, and raise the GET /organization budget for layout loads. Co-authored-by: Cursor <cursoragent@cursor.com>