No rate limiting on gRPC endpoints

[kwsantiago]

Description

• API vulnerable to DoS through resource exhaustion
• No request throttling

Fix

• Add rate limiting middleware
• Configurable limits per endpoint
• Return 429 status on limit exceeded