Feat: add bruteforce protection

[CipherGeek]

Description of the issue

The current version of Huly SelfHosted does not have any protection against password mining, as it allows an unlimited number of attempts for authorization.

Environment

• Huly v0.6.280 SelfHosted.

Possible solutions

This will significantly reduce the likelihood of attacks:

1. Add Google reCAPTCHA or other captcha to authorization and registration page.
2. Add two-factor authorization.
3. In addition, add limit the number of authorization requests from a single IP address.

[kasir-barati]

This one looks like tons of fun. I am down. I'll do some digging to see what should be done. BTW