Improve 2FA handling

[hardillb]

part of FlowFuse/security#93

Description

Covers:

• delete password reset tokens when 2FA enabled
• reduce password reset token to 30mins
• add 30 second timeout to send password reset button (60 if rate limiting triggered)

Related Issue(s)

FlowFuse/security#93

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
  • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production

Labels

• Includes a DB migration? -> add the area:migration label

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 78.17%. Comparing base (e066ed7) to head (1c81f80).
Report is 6 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4255   +/-   ##
=======================================
  Coverage   78.17%   78.17%           
=======================================
  Files         287      287           
  Lines       13270    13270           
  Branches     2973     2973           
=======================================
  Hits        10374    10374           
  Misses       2896     2896           

Flag	Coverage Δ
backend	78.17% <100.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.