Update BossAI workflow and workspace experience

src/routes/proxy/mod.rs

@@ -624,6 +624,7 @@ async fn check_auth(state: &AppState, headers: &HeaderMap) -> Result<Option<i64>
             if !key.enabled.unwrap_or(true) {
                 return Err(AppError::Forbidden("API key is disabled".into()));
             }
+            UsageTracker::new(state.db.clone()).check_rate_limit(key.id).await?;
             Ok(Some(key.id))
         }
         DownstreamAuthResult::Global { .. } => Ok(None),