Rate limiting login and registration in a .NET 10 Minimal API (per IP, no extra packages)

Adding built-in ASP.NET Core rate limiting to the auth endpoints of my free .NET Minimal API starter, with tests.