[Server]: Implement API Rate Limiting for Security

[NightClover-code]

Description:

To protect our API from abuse and potential DDoS attacks, we need to implement rate limiting across our endpoints, with special attention to authentication routes.

Current State:

Currently, there is no rate limiting implemented, which could leave the API vulnerable to abuse, especially for sensitive endpoints like authentication.

Required packages

pnpm add @nestjs/throttler

Suggested Rate Limits:

| Route | Time Window | Max Requests | Notes |
|-------|------------|--------------|-------|
| /auth/login | 15 minutes | 5 | Prevent brute force |
| /auth/register | 1 hour | 3 | Prevent spam accounts |
| /products (GET) | 1 minute | 30 | Regular browsing |
| /orders | 1 minute | 10 | Normal usage |
| /upload | 1 hour | 20 | Prevent abuse |

Relevant Docs

https://docs.nestjs.com/security/rate-limiting