Switch rate limiter to LRU eviction

**Parent:** #624

`crates/zeph-a2a/src/server/router.rs:33-36` — HashMap-based rate limiter grows unbounded under distributed IP attacks. Use LRU cache or subnet-based limiting.