Function maybe_guard_stream 

fn maybe_guard_stream(
    stream: SendableRecordBatchStream,
    permit: Option<OwnedSemaphorePermit>,
) -> SendableRecordBatchStream

Wraps stream so it holds permit until fully consumed. Returns stream unchanged when no permit was acquired (limiter disabled).