Control plane protection for switch stability

Rate-limit the traffic directed at the switch CPU to prevent management-level resource exhaustion.