Add rate limiting to protect APIs
Implement rate limiting. Sliding window, per-user and per-IP, different limits per endpoint, rate limit headers, admin bypass.
Protecting APIs