Implement a secure email service for password reset tokens.
Location: server/src/controllers/AuthController.ts:468
Acceptance criteria:
- Generate cryptographically secure reset token
- Send token via configured email provider
- Store token hash (not plaintext) with expiry
- Endpoint returns generic success regardless of email existence
Implement a secure email service for password reset tokens.
Location: server/src/controllers/AuthController.ts:468
Acceptance criteria: