Template Name: Password Reset
Trigger: POST /api/auth/forgot-password
From: Konfiguriert via SMTP_FROM env var
Subject: Reset your LeanCTX password
Link expires: 1 hour

---

You requested a password reset for your LeanCTX account.

Click to reset your password:

{{link}}

This link expires in 1 hour.
If you didn't request this, ignore this email.

---

Variables:
  {{link}} = {PUBLIC_BASE_URL}/login?reset_token={token}
             Beispiel: https://leanctx.com/login?reset_token=abc123...

Hinweis: Der Endpoint gibt IMMER "If an account exists, a reset email has been sent."
zurueck, auch wenn die Email nicht existiert (Anti-Enumeration).
