lua-resty-retry-budget

Limits retries to a fraction of recent traffic, and can send one
hedged attempt to cut tail latency. Shared state lives in a
lua_shared_dict so every nginx worker draws from the same budget.