Password reset

A focused password-reset email with a single clear action and an explicit expiry window. Includes the standard 'ignore this if you didn't request it' reassurance line that reduces support tickets and builds trust.