add some kind of bot protection

e.g. https://altcha.org looks ok. open source and self hosted. also mentioned here: https://european-alternatives.eu/de/produkt/altcha