Auth-aware rate limiting

[kwsantiago]

Differentiate rate limits for authenticated (NIP-42) vs anonymous connections.

• Higher events/minute for authed pubkeys
• Configurable limits per tier
• Whitelist specific pubkeys for unlimited access