RFC 306: Enable hard GraphQL rate limiting

Created by: ryanslade

After https://github.com/sourcegraph/sourcegraph/issues/18100 is done and we are confident with our level of rate limiting we should enable hard limiting.

This means:

• Actually blocking requets
• Returning the valid HTTP headers
• Returning HTTP 429