Get current-month event usage vs plan quota (API-key auth)

Safe to poll every few seconds — the underlying count is cached 30s per business. Response includes resetAt (ISO) and overagePerEventUsd; use exceeded as the gate signal.