Rate-limit Requests

[zysim]

As the sign says.

We should rate-limit API calls to prevent overloading the server. Standard stuff, really.

[zysim]

Let's implement a general rate limiter as a middleware. Then we can make another (or the same) middleware that handles custom rate-limiting for specific endpoints, if needed.

[Dalet]

.NET 7 added built-in rate-limiting functionality: https://blog.maartenballiauw.be/post/2022/09/26/aspnet-core-rate-limiting-middleware.html