changelog: add entry for per-callsite rate-limited logging

Add an entry under the Unreleased section documenting the new
per-callsite rate-limited logging macro and the migration of
guest-triggered high-rate callsites.

Signed-off-by: Nikita Kalyazin <kalyazin@amazon.com>

Author: kalyazin

CHANGELOG.md

@@ -14,6 +14,13 @@ and this project adheres to
   support for Vsock Unix domain socket path overriding on snapshot restore. More
   information can be found in the
   [docs](docs/vsock.md/#unix-domain-socket-renaming).
+- [#5799](https://github.com/firecracker-microvm/firecracker/pull/5799): Add
+  per-callsite rate limiting for guest-triggered log paths via the
+  `error_rate_limited!` macro. Potentially high-rate callsites in balloon, net,
+  block, PCI, and MMIO device paths are migrated to use rate-limited logging
+  with a fixed budget of 10 messages per 5-second window. A new
+  `rate_limited_log_count` metric tracks the total number of suppressed
+  messages.
 
 ### Changed