gitserver: Sync rate limiters from external services

Created by: ryanslade

We needed to revert our previous attempt at syncing rate limiters: #34158

The reason was that fetching external services on Cloud is not free as it incurs an API call to Cloud KMS to decrypt external service config.

This change applies optional rate limiting to the rate limit syncer and also only attempts to sync external services that have changed since the last sync.