validation

Category-based API rate limiting with Upstash Redis, Zod input validation, and XSS sanitization utilities