Access Recovery

Reset the admin password flow.

This mock route confirms the shape of password recovery before backend email delivery lands.