Securing Next.js API Routes: Rate Limiting and Validation

How to secure Next.js route handlers and server actions — input validation, authentication and authorization, rate limiting, and protecting against abuse.