Rate limiter counter is created atomically

Creates the counter with SET NX plus TTL in one call, so simultaneous requests at the start of a window can't reset it.