Secure account recovery
A reset link is single-use, expires after 30 minutes, and is never shown in ModiAds logs.