An enterprise admin is investigating why a scheduled internal reporting tool that pulls repository metadata via the GitHub REST API intermittently fails with HTTP 403 responses during peak hours. The tool authenticates as a GitHub App installation. Support asks the admin to first determine whether the failures are caused by exhausting the app's hourly request budget before escalating. Which response header should the admin instruct the team to inspect to confirm this is a primary rate limit exhaustion?