Password reset
Start the Cognito reset flow here. In preview mode, this confirms local reset behavior without an external mail provider.
Protected entry is wired for Cognito, with seeded local preview accounts when credentials are not configured.
The app opens the correct role workspace after authentication and respects multi-role account selection.