Rulecache

Server load has been killing us, and it increasingly looks like the rule system owns a bit part of the blame.

We should watch this overhaul closely before deploying, but it's ATP and appears to be a lot faster.

One other obvious opportunity is the #read_rules stuff, which gets called on virtually every request.