Make the plan update rate limit visible

An update over the per-socket limit was dropped with no reply and no log.
The server now refuses it with `rate limited`, warns once per window, and
closes a connection that stays over the limit for three consecutive windows,
so a client without resends reconnects and replays its outbox.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>