The Password Resets endpoints allow users to initiate and complete a password reset flow.
Password reset tokens expire after 14 days. Once expired, the token cannot be used to reset a password and a new reset must be initiated. Both the Verify Password Reset Token and Reset Password endpoints enforce this expiry window and return distinct responses for expired vs. already-used tokens.