upgrade zat to v0.3.0-alpha.25, fix bot detection to be rate-based
- zat: v0.3.0-alpha.7 -> v0.3.0-alpha.25
- websocket now pulled transitively from zat instead of direct dep
- bot detection: replace broken "500 posts ever" threshold with
"50 posts in last 24h" time-windowed rate check
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>