Scalable and Provably Fair Exposure Control for Large-Scale Recommender Systems