Classify API abuse patterns from request shape, velocity, auth context, payload risk, and business impact