Account and login
Password resets, registration, profile access, verification, and session issues.
- Forgot-password and reset-password errors should show safe user-facing messages.
- Never send passwords or reset tokens in a support request.
- For profile-photo requests, ID verification status matters.