feat: 配置列表分页与钉钉机器人分钟级排队限流

统一 sources/templates/channels/rules 列表为分页响应，避免配置增多时全量返回；按钉钉 access_token 限制每分钟发送并在超限时等待下一分钟，降低触发官方封禁风险。

Co-authored-by: Cursor <cursoragent@cursor.com>

internal/adapter/dingtalk.go

@@ -2,6 +2,7 @@ package adapter
 
 import (
 	"bytes"
+	"context"
 	"crypto/hmac"
 	"crypto/sha256"
 	"encoding/base64"
@@ -27,7 +28,9 @@ type dingtalkMD struct {
 	Text  string `json:"text"`
 }
 
-type DingTalkSender struct{}
+type DingTalkSender struct {
+	limiter *DingTalkLimiter
+}
 
 func (s *DingTalkSender) Type() string { return "dingtalk" }
 
@@ -37,6 +40,12 @@ func (s *DingTalkSender) Send(title, content string, config json.RawMessage) err
 		return fmt.Errorf("parse dingtalk config: %w", err)
 	}
 
+	if s.limiter != nil {
+		if err := s.limiter.Acquire(context.Background(), DingTalkLimitKey(cfg.WebhookURL)); err != nil {
+			return fmt.Errorf("dingtalk rate limit: %w", err)
+		}
+	}
+
 	reqURL := cfg.WebhookURL
 	if cfg.Secret != "" {
 		timestamp := time.Now().UnixMilli()