Lock-free atomic-counter ceiling. Rejects excess calls with ErrConcurrencyLimit before any retry or circuit-breaker logic runs. Use to protect handlers from being overwhelmed by their own callers.