Your retry logic has never seen a real 429. Here is how to test it with a local fault-injecting mock