Forgot password

This route is intentionally ready for Supabase reset-email wiring later. In local mock mode, create a new demo account or update the JSON store.