Reset access through the same identity backend the app will trust

Password recovery stays central here so the website and customer app always share the same updated credentials.

Username

Email

Shared Recovery

Reset requests now flow through the shared auth backend used by both the website and customer app.