Report submissions are rate-limited to protect the moderation queue

Reports now have their own dedicated rate limit — a tighter per-IP bucket plus a per-user bucket — so a single source can't flood the human-triaged queue, and legitimate reporters sharing a carrier NAT aren't punished for someone else's abuse.