Parses authenticated JSON request bodies with a bounded limit and a structured oversized response.

Keep this plug after authentication and quota checks so rejected clients cannot make the proxy read or decode large JSON bodies.