Shared-domain recovery
Submitting a known email surfaces a local reset token for the seeded control-plane runtime, using PostgreSQL when configured.