Rate limiting

[smashwilson]

There's approximately zero security on the incoming webhook requests. Because we ignore the hook payload and always do the exact same thing, the biggest risk is a DoS, when an attacker spams the hook and forces deployment after deployment. To counter this, let's rate-limit the deployment action.