a cloudflare bill spike is usually a loop, not traffic.
lunora now catches the common ones at codegen, before deploy:
count_without_index, queue_dispatch_cycle, cron_every_minute,
container_long_sleep_after. each finding names the billing meter it moves.
