Password Reset

Recover account access.

This replaces the WordPress password-reset route and gives you room for token-based recovery in your own backend.