ratelimit: NPM package syncer should sync rate limit from config

Created by: ryanslade

It now follows the the pattern used by other rate limiters where their rate limit is synced on startup and then updated if the config changes.

We also switch to a stricter, non-infinite rate limiter if none is specified.

Test plan

Will confirm after deployment that we no longer see an infinite rate limit.