[backport -> release/3.8.x] fix(rate-limiting): do not set response headers if conf.hide_client_headers is true

[backport -> release/3.8.x] fix(rate-limiting): do not set response headers if conf.hide_client_headers is true #28593