fix: update middleware for custom auth and increase dev rate limit

- Change session cookie name from better-auth.session_token to session_token
- Increase rate limit to 100 req/min in development (10 in production)
- Fix DATABASE_URL to use URL-encoded password for special characters

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docker-compose.yml

@@ -72,7 +72,7 @@ services:
       - web
     environment:
       NODE_ENV: development
-      DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/vorteq_dev
+      DATABASE_URL: postgresql://postgres:L9IbAPm7zFFaTdfCgVxDQhK7cKp8%2BwGH1pNp%2Fsz0joA%3D@postgres:5432/vorteq_dev
       REDIS_URL: redis://redis:6379/0
       BETTER_AUTH_SECRET: ${DEV_AUTH_SECRET}
       BETTER_AUTH_URL: https://${DEV_DOMAIN}