fix: Fix goroutine leak in hosted agent rate limiter

- Added stop channel and stopped flag to RateLimiter struct
- Modified replenishTokens to listen for stop signal and exit cleanly
- Added Stop() method to gracefully shutdown rate limiter
- Added Stop() method to HostedAgent to cleanup rate limiter on shutdown

Fixes cursor bot issue: Rate Limiter Goroutine Leak

Author: bennyyang11

pkg/analyze/agents/hosted/hosted_agent.go

@@ -50,6 +50,8 @@ type RateLimiter struct {
 	tokens    chan struct{}
 	interval  time.Duration
 	lastReset time.Time
+	stopCh    chan struct{}
+	stopped   bool
 }
 
 // RetryConfig defines retry behavior
@@ -188,6 +190,8 @@ func NewRateLimiter(requestsPerMinute int) *RateLimiter {
 		tokens:    tokens,
 		interval:  interval,
 		lastReset: time.Now(),
+		stopCh:    make(chan struct{}),
+		stopped:   false,
 	}
 
 	// Start token replenishment goroutine
@@ -201,12 +205,18 @@ func (rl *RateLimiter) replenishTokens() {
 	ticker := time.NewTicker(rl.interval)
 	defer ticker.Stop()
 
-	for range ticker.C {
+	for {
 		select {
-		case rl.tokens <- struct{}{}:
-			// Token added successfully
-		default:
-			// Bucket is full, skip
+		case <-rl.stopCh:
+			// Stop signal received, exit goroutine
+			return
+		case <-ticker.C:
+			select {
+			case rl.tokens <- struct{}{}:
+				// Token added successfully
+			default:
+				// Bucket is full, skip
+			}
 		}
 	}
 }
@@ -221,6 +231,14 @@ func (rl *RateLimiter) waitForToken(ctx context.Context) error {
 	}
 }
 
+// Stop cleanly shuts down the rate limiter and stops the replenishment goroutine
+func (rl *RateLimiter) Stop() {
+	if !rl.stopped {
+		rl.stopped = true
+		close(rl.stopCh)
+	}
+}
+
 // Name returns the agent name
 func (a *HostedAgent) Name() string {
 	return a.name
@@ -461,6 +479,13 @@ func (a *HostedAgent) SetEnabled(enabled bool) {
 	a.enabled = enabled
 }
 
+// Stop cleanly shuts down the hosted agent and stops background goroutines
+func (a *HostedAgent) Stop() {
+	if a.rateLimiter != nil {
+		a.rateLimiter.Stop()
+	}
+}
+
 // UpdateCredentials updates the API key for authentication
 func (a *HostedAgent) UpdateCredentials(apiKey string) error {
 	if apiKey == "" {