feat: Rate limting on backed

### Problem / Motivation

A single, very motivated, UTD student can use inspect element to find the API endpoints and their bearer token. They can then use this info to DDOS our endpoints. Vercel somewhat stops this with their serverless system, but if we ever move to lambdas or non-serverless, it will be a bigger issue. So we need rate limitation baked into the backend as well as basic rate limiting to the frontend.

### Proposal

We can easily add this via `fastapi-limiter` for a simple rate limiting per IP address but for more complex production ready cases we need to implement a redis cahce for his to work and do it per UID instead of IP.

### Acceptance criteria

_No response_