Password reset

This is a UI placeholder. Wire your transactional email provider (SendGrid, Postmark, etc.) and tokenized reset flow before production.