Log inAccount
Forgot password is shared
/forgot is the same reset flow as business login. No invented Resend key.
Forgot password? uses /forgot. EMAIL_PROVIDER=resend only when RESEND_API_KEY is set — otherwise log. Native can request a reset with POST /api/v1/auth/forgot.
Reset never returns whether the email exists.