Introduce retry budget controls to prevent runaway retries under upstream failure.
Introduce retry budget controls to prevent runaway retries under upstream failure.