Fix rate limiting: key off X-Forwarded-For, not the proxy peer address

Add rate limiting, tests, better extraction, and HF auto-deploy