Recover access without exposing workspace data.

Reset links are sent only to verified account emails. Tenant access remains controlled by active invitations, roles, and server-side permissions.