Rate Limit Gateway

Build an API gateway middleware that enforces per-user and per-IP rate limits with Redis. Include burst + sustained limits, consistent error responses, and a basic dashboard endpoint to inspect limit status.