v0.3.2: fix 401 on save-records fetch + fix 429 rate limiter behind proxy

- AdminDashboard: M() now sends admin_token from localStorage with fetch
- rate-limit: keyGenerator uses req.ip instead of req.socket.remoteAddress
  (Express trust proxy reads X-Forwarded-For for real client IP)
- main.ts: moved global rateLimiter after express.static so static files
  (JS/CSS/admin page/favicon) are never rate-limited

VERSION

@@ -1 +1 @@
-0.3.1
+0.3.2