feat: implement Resilience4j fault tolerance and automated account lockout security

[podlLev]

Overview

This PR introduces Resilience4j fault tolerance patterns (Retry & Circuit Breaker) for external weather API integrations alongside automated account lockout defenses against credential brute-forcing attacks.

---

Key Changes

• System Fault Tolerance & Resilience (Resilience4j):

  • Dependency Integration: Added resilience4j-spring-boot3 starter to enable declarative fault-tolerance annotations and configurations.
  • Smart Retry Predicate: Implemented WeatherApiRetryPredicate to conditionally trigger retries based on specific weather API response status codes or failure exceptions.
  • Circuit Breaker & Resilience Configuration: Configured circuit breaker trip thresholds and retry policies for the weather integration layer to protect upstream services during external outages, supported by unit test coverage.

• Account Security & Brute-Force Defenses:

  • Schema Migration: Added failed_login_attempts and locked_until columns to the users table to track authentication failures and temporary lock periods.
  • Automated Account Lockout: Implemented security logic to automatically lock user accounts after a threshold of repeated failed sign-in attempts, neutralizing credential stuffing and brute-force attacks.