Rate limiting

Some unauthenticated or abuse-sensitive surfaces use the in-memory limiter in server/utils/rate-limit.ts. Check callers when exposing new anonymous endpoints.

This is separate from upstream MCP rate limits imposed by vendors.