Password reset

Request password reset

This forwards the email request to the backend forgot-password contract.

Password recovery is backend-owned and fail-closed.