Auditing Password Reset Email API 429 Rate Limit Cooldowns

Treat a password-reset request as an auditable recovery workflow, not as a synchronous email send:...