Password reset placeholder.

The real implementation will use Supabase recovery email flows. This demo keeps the route visible in the auth map.