Reset password

Auth uses Supabase sessions and owner-scoped database policies.