Add rate-limiting to the Rendezvous experimental endpoint

Implemented in https://github.com/element-hq/synapse/pull/17056, the endpoint for starting a rendezvous endpoint currently has no rate-limiting. Since there is a cap to the number of concurrent rendezvous sessions, this could technically allow a DoS where a user creates many sessions, forcing other legitimate sessions to expire.