v2.9: feat(auth): Enhance failed login attempt logging and refine throttling

Records the attempted username, exception type, and message for all failed login attempts, providing a more comprehensive audit trail.

Additionally, this change prevents login attempts already rejected by the throttling mechanism (`TooManyLoginAttemptsException`) from being counted towards the `maxLoginAttempts` limit. This ensures that repeated attempts while throttled do not inadvertently extend the lockout period indefinitely, thus avoiding a self-DoS scenario.