Can a small project do this and (cheaply) be robust to getting slashdotted?

Which is often the dream for a small project.

Probably yes, Codeberg are very transparent about their infra details and they don't seem wild:

https://codeberg.org/Codeberg-Infrastructure/meta