Set a new passwordAccount
Code lasts 60 minutes
The emailed link expires after one hour. Request a new one at /forgot.
RESET_TTL_MS is 60 minutes. After that, this page rejects the code and the buyer requests a new link at /forgot.
The server stores a sha256 digest. Plaintext never stays in the database.