Potential experiments

fix(api)!: enforce declared rate limits and correct route auth (#2500)

fix(api): correct guild permission and mfa checks (#2499)

fix(auth): correct mfa errors, sudo methods and birth dates (#2498)

fix(media-proxy): bound the relay body and drop the unread ttl (#2496)

fix(media-proxy): correct route errors and test the ip gate (#2495)

chore(gateway): delete modules with no callers (#2494)

feat(gateway): add an undrain endpoint and sweep orphan tables (#2493)

fix(gateway): close oversized bot identify with code 4011 (#2497)

fix(gateway): return precise rpc errors and bound snowflakes (#2491)

fix(gateway): resync permissions and validate voice leaves (#2492)

fix(gateway): repair the session lifecycle, limits and dead code (#2490)

fix(api): answer 403 when the client ip header is unparsable (#2483)

chore(sdk): regenerate from OpenAPI

fix(api): resolve missing user rows for webhooks and sessions (#2487)

fix(api)!: align error codes with throw sites and image bounds (#2488)

fix(config): derive the VAPID public point to verify the pair (#2521)

Merge remote-tracking branch 'origin/main'

Merge remote-tracking branch 'origin/main'

Merge remote-tracking branch 'origin/main'

Merge remote-tracking branch 'origin/main'