Enter the code at /reset

After the email, web opens /reset. Native stays on the splash reset step.

Web opens /reset from the emailed link (Playwright may receive the code when PLAYWRIGHT=1). Production never returns the code in JSON.

Native ResetPasswordFlow / splash forgot collect the code in-app after Send reset link.