79761e47

By: Michael Lynch <git@mtlynch.io>

Limit logins by email and IPv4 only

Remove the global login attempt limit and enforce limits independently per email address and per unique IPv4 address. Configure production for three attempts per email and four attempts per IPv4 within the existing window.

Update limiter and handler tests to cover email-specific limits, IPv4-specific limits, IPv6 exemption from the IPv4 limit, and the package email helper.
Codeberg

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 1s 4s 4s 5s 1s
Eval 4s 51s 51s 56s 0s
Build 7s 5m49s 40m04s 40m12s 0s
Suite 1s 6m45s 40m11s 40m12s 39m06s