Hello, is it good to leverage watchdog or systemd service to restrict or control the resource consumption on the client side ?

Yes, I'd definitely recommend using the watchdog!

Does fleetdb track the " distributed query is denylisted" query If so what is the table we should see? or client side?

fleetd_logs would be a good table to look at for that.