Request a password reset email

Generates a 1-hour reset token and emails a link. Always returns {status: "ok"} regardless of whether the email exists, to prevent account enumeration.

Rate-limited per IP (shared with login).

curl -X POST "https://loading/auth/forgot-password" \  -H "Content-Type: application/json" \  -d '{    "email": "user@example.com"  }'

{
  "status": "string"
}

{
  "detail": [
    {
      "loc": [
        "string"
      ],
      "msg": "string",
      "type": "string",
      "input": null,
      "ctx": {}
    }
  ]
}