Add abuse detection for repeated event creation

A user could spam event creation. Add:
- Rate limit: max 5 events per user per day
- Check rate limit before allowing creation, return 429 Too Many Requests if exceeded
- Log suspicious activity (e.g., 50 events in 1 hour) for manual review
- Send email alert to admin if rate limit triggered