Rate limiting in Minimal APIs with .NET's built-in middleware

Per-IP rate limiting, 429 responses with Retry-After and integration tests, using only what ships with ASP.NET Core.