fix: optimize rate-limiting scope, enhance weather fallback error handling, and enforce location limits

[podlLev]

Overview

This PR improves application stability and resource management by bypassing rate limiting for static assets, gracefully handling individual weather fetch failures on the home view, and introducing validation constraints on per-user location tracking.

---

Key Changes

• Rate Limiting Optimization:

  • Static Asset Exclusion: Updated the rate-limiting filter chain to bypass static resources (e.g., CSS, JS, images), preserving API rate limits exclusively for dynamic backend endpoints and preventing asset request throttling.

• Resilience & Fallback Handling:

  • Graceful Weather Degraded State: Refactored home page data aggregation to handle per-location weather fetch failures gracefully. A single upstream location failure now isolates to that specific item without breaking the entire dashboard render.

• Domain Constraints & Validation:

  • Location Limit Enforcement: Introduced validation constraints to limit the maximum number of locations a user can add, backed by unit and integration tests to verify threshold enforcement.