fix: protect publish path from mysql exhaustion

server/user_verification_test.go

@@ -272,6 +272,7 @@ type testSecurityStore struct {
 	consumedTarget      string
 	independentPassword *types.IndependentPassword
 	youthMode           *types.YouthModeSettings
+	youthModeReads      int
 	attempts            int
 	lockedUntil         *time.Time
 	notifications       []types.SystemNotification
@@ -379,6 +380,7 @@ func (s *testSecurityStore) UpdateIndependentPasswordAttempts(_ types.TenantID,
 }
 
 func (s *testSecurityStore) GetYouthMode(_ types.TenantID, uid types.Uid) (*types.YouthModeSettings, error) {
+	s.youthModeReads++
 	if s.err != nil {
 		return nil, s.err
 	}