Function pre_auth_middleware 

pub async fn pre_auth_middleware(
    __arg0: State<Arc<Shield>>,
    request: Request,
    next: Next,
) -> Response

Pre-auth middleware: enforces rules that need no validated claims (IP / header keys). Layered outside auth so anonymous floods are shed before any signature verification.