Forgot password

Password recovery now uses Supabase Auth directly and returns users to the unified app through the SSR confirmation route.