Reset 2FA Action Missing Global POST Limiter?

[ambergristle]

hi @pilcrowonpaper, thanks for building + maintaining this!

i'm trying to learn more about auth, so i'm building an example app with hono + lucia-auth/copenhagen guidelines, and this repo has been an incredibly helpful reference.

i noticed that the reset2FAAction appears to be the only one not covered by the global POST rate limiter, and i was wondering whether that's business logic or just an omission.

example-nextjs-email-password-2fa/app/2fa/reset/actions.ts

Line 8 in b66c0de

export async function reset2FAAction(_prev: ActionResult, formData: FormData): Promise<ActionResult> {