[12.x] Additional password reset token env vars

[gsinti]

This adds optional environment variables to config/auth.php for the passwords entry, allowing token expiration and reset request throttling to be configured without publishing the config file.

[mohammadrasoulasghari]

Why do we need to set or change these values through env variables?

[gsinti]

Same reason we allow the table to be set through an environment variable.

With Laravel 11.x, new projects don't start with the majority of config files published in order to reduce boilerplate.

This change allows the expiration and throttle to be configured without publishing the entire auth.php file or needing to add the passwords section at all (if already published).

[taylorotwell]

Thanks for your pull request to Laravel!

Unfortunately, I'm going to delay merging this code for now. To preserve our ability to adequately maintain the framework, we need to be very careful regarding the amount of code we include.

If applicable, please consider releasing your code as a package so that the community can still take advantage of your contributions!

[gsinti]

@taylorotwell: Thanks for your comment.

This is following the slim skeleton release introduced in #47309.

The default configuration files have also received many more environment variables so that more options can be changed from the application’s .env file.

If I want to change the throttle or expiry, I must now publish the entire config/auth.php to make this single change instead of overriding it with an environment variable.

Is that the intended process?