fix: update documentation around autoconfirm

apps/docs/content/guides/auth/auth-email-passwordless.mdx

@@ -317,3 +317,7 @@ If successful, the user is now logged in, and you receive a valid session that l
   "user": {...}
 }
 ```
+
+## Email Confirmations
+
+Rate limits continue to apply when email confirmations are disabled. When email confirmations are disabled, an email is sent and the associated email is marked as confirmed.

apps/docs/content/guides/auth/phone-login.mdx

@@ -229,3 +229,7 @@ response = supabase.auth.update_user({
 
 The user receives an SMS with a 6-digit pin that you must [verify](#verifying-a-phone-otp) within 60 seconds.
 Use the `phone_change` type when calling `verifyOTP` to update a user’s phone number.
+
+## Phone Confirmation
+
+Rate limits continue to apply when phone confirmations are disabled. When phone confirmations are disabled, an SMS message is sent and the associated phone number is confirmed.

apps/docs/content/guides/auth/rate-limits.mdx

@@ -3,6 +3,12 @@ title: 'Rate limits'
 subtitle: 'Rate limits protect your services from abuse'
 ---
 
-Supabase Auth enforces rate limits on endpoints to prevent abuse. Some rate limits are [customizable](/dashboard/project/_/auth/rate-limits).
+Supabase Auth enforces rate limits on endpoints to prevent abuse. Some rate limits are [customizable](/dashboard/project/_/auth/rate-limits). Note that rate limits continue to apply when:
+- Email confirmations or Phone Confirmations are disabled
+- Send Email or Send SMS Hook is in use.
+
+
+
 
 <AuthRateLimits />
+