Fixes#58
- Verified that GET /api/demo already includes X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers.
- Verified that GET /api/jobs/:id and POST /api/jobs responses already include createdAt and completedAt timestamps.
- No code changes were required as existing implementation matches the requirements.