Add sliding-window rate limiter in server/dev-auth.ts (60 req/min reads, 10 req/min writes per IP). Apply checkRateLimit() in all Vite plugins and claude-proxy.ts after auth validation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>