SMS OTP Login API — Resend Cooldowns and Rate Limits for Media Signup

Put the abuse budget in the application, then keep SMS behind a replaceable transport contract....