chore(env): add rate limiting configuration variables

- Add new environment variables for rate limiting configuration
- Include settings for /auth/request-code and /data API endpoints
- Specify limit and time window for each endpoint

Author: fulleni

.env.example

@@ -43,3 +43,12 @@
 # - If an admin with this email already exists, nothing changes.
 # This provides a secure way to set or recover the admin account.
 # OVERRIDE_ADMIN_EMAIL="[email protected]"
+
+# --- Rate Limiting ---
+# Configuration for the /auth/request-code endpoint.
+RATE_LIMIT_REQUEST_CODE_LIMIT=3
+RATE_LIMIT_REQUEST_CODE_WINDOW_HOURS=24
+
+# Configuration for the /data API endpoints.
+RATE_LIMIT_DATA_API_LIMIT=1000
+RATE_LIMIT_DATA_API_WINDOW_MINUTES=60