Railway, trust proxy, and the multi-hop rate limiter

A production bug with express-rate-limit behind Railway's proxy chain — and why `trust proxy: true` is almost never the right answer.