fix: restore per-client rate limiting fallback

Preserve distinct rate-limit buckets after the server rewrite by injecting the socket address as a trusted fallback and add focused tests around client address handling.

Author: brookslybrand