request_size_limiter policy rejects requests whose body exceeds a configured limit,
before they’re forwarded upstream — a cheap guard against accidental or abusive oversized
prompts. It runs at pre_request.
global policy at pre_request to set a
gateway-wide ceiling, or scope it to specific consumers for tighter per-tenant limits.