Authentication

Modern, secure sign‑in with JWT and expiring password reset links.

• User registration and login (JWT)
• Password reset via email with expiring tokens
• Rate‑limited endpoints for sensitive actions