OTP email verification and password reset

Secure OTP-based email verification and password reset flow with anti-enumeration, cooldowns, and safe cryptographic practices