feat(export): add readable account archive

JobTrackerApi/Program.cs

@@ -46,6 +46,7 @@ builder.Services.AddSingleton<BackgroundTenantRunner>();
 builder.Services.AddSingleton(TimeProvider.System);
 builder.Services.AddScoped<UserOperationStore>();
 builder.Services.AddScoped<EmailSendAttemptStore>();
+builder.Services.AddScoped<AccountDataExportService>();
 builder.Services.AddScoped<AiOperationAdmission>();
 builder.Services.AddScoped<StrategySnapshotService>();
 builder.Services.AddSingleton<IAiOperationHandler, StrategySnapshotOperationHandler>();
@@ -452,6 +453,17 @@ builder.Services.AddRateLimiter(options =>
                 QueueLimit = 0,
             }));
 
+    options.AddPolicy("account-data", context =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: $"account-data:{context.User.FindFirst(System.Security.Claims.ClaimTypes.NameIdentifier)?.Value ?? context.User.FindFirst("sub")?.Value ?? context.Connection.RemoteIpAddress?.ToString() ?? "unknown"}",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 2,
+                Window = TimeSpan.FromHours(1),
+                QueueProcessingOrder = QueueProcessingOrder.OldestFirst,
+                QueueLimit = 0,
+            }));
+
     // Brute-forcing a 6-digit TOTP code (1e6 space) is far more feasible than a password, so
     // this gets a tighter window than auth-login.
     options.AddPolicy("auth-2fa-challenge", context =>