Lock the account after N failed password attempts

## What

lock the account after N incorrect passwords (lockout-attempts policy / password-stage option). Also: lockout/reputation: reset reputation to 0 on successful login, vs lock account after N failures. Same brute-force-mitigation feature area.

## Want

- Lock the account after N incorrect passwords (lockout-attempts policy / password-stage option)
- Related lockout/reputation: reset reputation to 0 on successful login, vs lock account after N failures

## Ideas this came from

- [#11762 Lockout attempts policy](https://github.com/goauthentik/authentik/issues/11762) — To reduce the effectiveness of attempts to compromise a user account, things like preventing an account from logging in if enough failed login attempts have bee
- [#20148 Option to automatically set reputation score to 0 upon successful login](https://github.com/goauthentik/authentik/issues/20148) — An option/flag to automatically set reputation score back to 0 for a user/IP upon successful login. Rather than just increasing reputation score by one
- [#23572 Lock account after x incorrect passwords](https://github.com/goauthentik/authentik/issues/23572) — Add an option to the password stage to lock an account after x number of incorrect passwords

No implementation files or tests are named. Start by reading the related issues #11762, #20148, and #23572, then clarify whether the work covers failed-password lockout, reputation reset, or both. Done should include an agreed configurable policy for N failed attempts and the selected successful-login behavior.

Written by the indexing model from the issue text.