Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure b

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.

Two API authentication failure branches wrote directly to the Log model:

 - API requests with no authentication key;
 - requests supplying an API key with an incorrect length

Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry.

Version affected: ≤2.5.45