osec Bot Gate: slow down AI scrapers without Cloudflare

A small middleware for your own server. One invisible proof-of-work check per visitor per week, search engines allowed.