feat: Allow cert allowlist mgmt cmd to use db args

Disable xsslint

The management command to generate certificates for users on a course's
allowlist (formerly whitelist) now allows for database arguments to
allow it to be called outside of a manual shell.

bumping enterprise version to 3.17.30

AA-664: add JwtAuthentication to course home api

refactor Replace django-ratelimit-backend with django-ratelimit

[TNL-7729] - Add check to discussion endpoints to secure API when discussions are blacked out.

9 tests are failing in this file in local devstack environments

Remove Vulture constraint

Fixing tests which were failing on running alone.
Main root cause was the mongodb client connection error.
On running all tests this mongodb connection establishes by some other test.

The mobile app is getting unexpected 403s from
/oauth2/exchange_access_token/, but we have been unable
to pinpoint from where they are coming. This commit
introduces a temporary exception handler to provide stack info
for 403s on this endpoint to try to track down the source.

Requires the ENABLE_403_MONITORING setting to be set to
True to enable the logging.

ARCHBOM-1667

[TSD] add annotations for login failure settings and feature flags

fix: Correct logging message to match function

[TSD] add annotation for the header & footer language selector

The logging text was duplicated from a different function

[TSD] Annotate schedules debugging toggle

feat: allow notify_credentials to take a list of usernames

[TSD] Annotate comprehensive theming settings

We use django-ratelimit to limit per IP login attempts, and then we use
django-ratelimit-backend to limit per username login attempts. This
change replaces the usage of django-ratelimit-backend with another
instance of django-ratelimit so that both limits can be managed by one
library.

This is the first step in being able to fully excise
django-ratelimit-backend from edx-platform. Note that we're still using
the `RateLimitMixin` in openedx/core/djangoapps/oauth_dispatch/dot_overrides/backends.py
because studio and the admin UI still relies on that for rate limiting.
Those login paths will have to be updated before we can remove the mixin
from our auth backend.

AA-511: update dashboard certificate button styling

docs: added related settings description for login attempts