During invite-only beta, password resets are handled manually by the ClaimPilot admin so we can keep early access controlled.