Do we need to write an RPC proxy "balance limiter" from scratch, or does there exist any such mediator software publicly or privately available?
As far as I know, such a proxy does not publicly exist.
Note we cannot use the web wallets as access to our own bitcoind is required.
Can't you use a online wallet for handling transactions, and a bitcoind to get network info? What are you doing that requires bitcoind access?