refactor, security updates, cv extraction upgrades

JobTrackerApi/Controllers/UsersController.cs

@@ -3,6 +3,7 @@ using JobTrackerApi.Services;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Identity;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.RateLimiting;
 using Microsoft.EntityFrameworkCore;
 using System.Security.Claims;
 
@@ -136,6 +137,7 @@ public sealed class UsersController : ControllerBase
     }
 
     [HttpPost("{id}/send-password-reset")]
+    [EnableRateLimiting("auth-email")]
     public async Task<IActionResult> SendPasswordReset([FromRoute] string id, CancellationToken cancellationToken)
     {
         var u = await _users.FindByIdAsync(id);
@@ -173,6 +175,7 @@ public sealed class UsersController : ControllerBase
     public sealed record SendTestEmailRequest(string? ToEmail, string? Subject, string? Message);
 
     [HttpPost("send-test-email")]
+    [EnableRateLimiting("auth-email")]
     public async Task<IActionResult> SendTestEmail([FromBody] SendTestEmailRequest? request, CancellationToken cancellationToken)
     {
         var currentUserId = User.FindFirstValue(ClaimTypes.NameIdentifier) ?? User.FindFirstValue("sub");