Prevent OTP Resend Within a Cooldown Window

[sarayu1310]

Even if rate limiting is added, a user can still request OTPs too quickly (e.g., spamming resend every 5 seconds).

Fix: Block resend if time since last OTP < 60 seconds.

[Sparshagarwal29]

hey is this issue still open to work ?