/reset is reserved, not a username

The emailed link opens here. That path is reserved, like /forgot and /login.

The forgot email opens /reset?token=…. That path is reserved, like /forgot and /unsubscribe.

Universal Links stay empty until Apple Team ID and Play fingerprints exist — never mint those identifiers.