API Rate Limiting & Authentication

**Description:** Implement robust API security measures
- JWT-based authentication system
- Rate limiting per user/IP
- API key management for external access
**Tech Stack:** Express, Redis, JWT
**Acceptance Criteria:**
- [ ] User authentication system
- [ ] Configurable rate limits
- [ ] API key generation/revocation