* fix(waf/admin): update rule so that cypress can bypass rate limits by passing a waf-secret header

* AI [review] please