docs: improve text around bcrypt

[mitar]

I think this is closer to how things are implemented, from what I have observed in the current code. So password is not silently truncated, but an error is returned. Also, the limit of 72 bytes (not characters!) is a property of the bcrypt algorithm itself and not the implementation.

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security. vulnerability, I
  confirm that I got green light (please contact
  security@ory.sh) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

[aeneasr]

🙏