Breaking candidate: GET /items now requires limit; existing callers without it may fail. Response addition: tag is added; compatibility depends on whether consumers reject unknown response fields. Confirm against actual schemas and client behavior.
