Registration Security
Customer registration includes built-in rate limiting (`throttle:5,1` = 5 attempts per minute per IP).
Vendors can optionally enable Cloudflare Turnstile CAPTCHA by configuring `TURNSTILE_SITE_KEY` and `TURNSTILE_SECRET_KEY` in environment settings.