[K8.7] Rate limits; logs without secrets #75

Roadmap: K8.7 · Phase 8 — Hardening & edge cases · target Nov 11–12 · status in ROADMAP: todo

Task

Rate limits; logs without secrets

Done when

• The task above is complete as described
• ROADMAP.md updated in the same change: task status, phase %, Readiness table, one Update-log line (AGENTS.md §0)
• pnpm typecheck && pnpm lint && pnpm test (+ cargo test for contract changes) pass

NEAR HACKATHON rules that apply

• Never commit secrets, keys or JWTs; they live in .env only.
• Code counts from the announcement on 2026-10-19 (Q-001).
• Logs must not contain secrets or personal data.

References

• ROADMAP.md · ARCHITECTURE_ESSENTIALS.md · AGENTS.md
• Hackathon rules: https://nearhackathon.com/HACKATHON.md