Origin abuse protection: wire RateLimitAbuse ANS alert (manual cockpit condition + subscription) #2272

Operational follow-up to merged PR1 #2263 (shared rate limiter). PR1 raises alerting.raise({eventType:'RateLimitAbuse', …}) on sustained abuse (fail-open, never awaited from the request path) and adds RateLimitAbuse to cds.requires.alerts.eventTypes.

A new ANS eventType needs MANUAL wiring (per the ops runbook) before alerts actually deliver:

• Create the per-eventType condition in the ANS cockpit for RateLimitAbuse.
• Wire the subscription (channel/recipients) for that condition.

Until this is done, the code emits the event but no notification is delivered. No code change required — this is a cockpit/config task on the target subaccount(s) (DEV first, then PROD).

Ref: docs/developers/operations/scheduler-troubleshooting.md / the ANS wiring runbook; memory note "ANS alerts need MANUAL per-eventType cockpit wiring".