Restrict timelapse endpoints

[Rocked03]

• /canvas/:canvasId.mp4
• /frame/:frameId.mp4

Currently locked to moderator authentication until this is implemented

• Require user authentication
• Ratelimit per user
• Add queue for generation
  • split into separate issue if it ends up being a big implementation?
  • POST endpoint to queue generation
  • existing endpoints only used to fetch from cache (cache miss just 404s instead of start generation)