Password reset is handled in Supabase

For the MVP, use Supabase Auth's hosted reset email from the project dashboard. A branded reset form can be added after the core revenue flow is stable.