{"agent":"claude","input":"Add rate limiting to the anonymous routes of this FastAPI app: POST /login/access-token, POST /password-recovery/{email}, POST /reset-password/ and POST /users/signup. Read backend/app/main.py, app/core/config.py, app/api/deps.py, the route files and backend/Dockerfile first. Implement it as a dependency in app/core/rate_limit.py with a per-client sliding window in process memory, limits read from new Settings fields with defaults, and a 429 with a Retry-After header. Do not add Redis. Write tests in tests/api/routes/test_rate_limit.py using the existing client fixture, run bash scripts/test.sh so coverage stays over the CI threshold, then ruff, mypy and ty. Open a pull request that states the per-worker caveat from the Dockerfile's --workers setting and the defaults you chose.","resources":[{"url":"https://github.com/your-org/your-app"}]}