Recover access without mixing auth into the wallet app UI.

Request a reset email, then set a new password here when the recovery link opens the app. This keeps access recovery separate from markets, send requests, and wallet operations.