By: Michael Lynch <git@mtlynch.io>
Rate limit shared-secret login attempts Add an in-memory rate limiter for shared-secret authentication attempts. Repeated login attempts now return 429 after exhausting the 24-hour limit.