explain a token bucket rate limiter, canvas only, no libraries, every frame a pure function of time so my renderer can screenshot it.