fix(server): rate-limit /api/analyze and /api/embed endpoints (#1328)

[azizur100389]

Summary

• Applies createRouteLimiter() to POST /api/analyze (10 rpm/IP) and POST /api/embed (20 rpm/IP) — the two heaviest FS-touching endpoints that were out of scope for U4 (fix(server): add per-route rate limiting on FS-touching endpoints (U4) #1327) because CodeQL did not flag them directly.
• Limits match issue Security follow-up: rate-limit /api/analyze and /api/embed (heaviest FS-touching endpoints) #1328's recommendation: 10 rpm for analyze (clone + full-tree walk), 20 rpm for embed (ONNX inference per file).
• Adds 2 structural wiring tests in rate-limit.test.ts matching the existing pattern.

Changes

File	Change
gitnexus/src/server/api.ts	Insert createRouteLimiter({ limit: 10 }) on POST /api/analyze, createRouteLimiter({ limit: 20 }) on POST /api/embed
gitnexus/test/unit/rate-limit.test.ts	2 structural wiring assertions (regex against api.ts source)

Test plan

• npx tsc --noEmit — clean
• npx vitest run test/unit/rate-limit.test.ts — 15/15 pass (was 13)
• npx prettier --check on changed files — clean
• Pre-commit hooks (eslint + prettier + typecheck) — passed
• Full vitest run --project default — only pre-existing dev-env failures (home dir .git causes tmpdir-based tests to see a parent git repo); all pass on CI

Closes #1328

[vercel]

@azizur100389 is attempting to deploy a commit to the NexusCore Team on Vercel.

A member of the Team first needs to authorize it.

[github-actions]

CI Report

✅ All checks passed

Pipeline Status

Stage	Status	Details
✅ Typecheck	success	tsc --noEmit
✅ Tests	success	unit tests, 3 platforms
✅ E2E	success	gitnexus-web changes only

Test Results

Tests	Passed	Failed	Skipped	Duration
8020	8019	0	1	375s

✅ All 8019 tests passed

1 test(s) skipped — expand for details

• buildTypeEnv > known limitations (documented skip tests) > Ruby block parameter: users.each { |user| } — closure param inference, different feature

Code Coverage

Tests

Metric	Coverage	Covered	Base	Delta	Status
Statements	77.62%	24457/31508	77.02%	📈 +0.6	🟢 ███████████████░░░░░
Branches	66.21%	15519/23437	65.97%	📈 +0.2	🟢 █████████████░░░░░░░
Functions	82.86%	2414/2913	81.86%	📈 +1.0	🟢 ████████████████░░░░
Lines	80.65%	22078/27375	79.89%	📈 +0.8	🟢 ████████████████░░░░

---

_{📋 View full run · Generated by CI}

[magyargergo]

Thank you for this!

[azizur100389]

Happy to contribute! The clear issue write-up made it straightforward to pick up. Thanks for the quick merge.