Password reset support

Talos Ledger is ready for a firm-managed reset workflow, but this starter build keeps recovery deliberately simple: admins can provision staff accounts, and password recovery should be wired to your preferred email provider before production rollout.