Add docs navigation and tighten API request security

lib/multiplayer-api.ts

@@ -8,6 +8,7 @@ import { multiplayerAppearance } from "./multiplayer-appearance";
 import { mediaUrls } from "./catalog";
 import { requestOrigin } from "./request-origin";
 import { ServiceError } from "./service-error";
+import { limitRoomCreation } from "./request-security";
 import { scheduleDiscordCleanup } from "./discord-cleanup-scheduler";
 import {
   discordPartyReady,
@@ -65,7 +66,7 @@ export async function multiplayerApi(
     if (!account)
       throw new ServiceError("Log in to create a multiplayer room", 401);
     const body = createRoomSchema.parse(await jsonBody(request));
-    await limit("multiplayer:create:" + accessHash, 20, 3600);
+    await limitRoomCreation(account.id, accessHash, limit);
     const profile = await accountProfile(account);
     const id = required(
       await client.rpc("create_map_room", {