- /account gains a Change password form (verify current, 8+ char new,
confirm match) backed by updateUserPassword + verifyPassword/hashPassword.
- Admin users resource gains a "Reset password" action that generates a
fresh temp password, sets it immediately, and reveals it once in the panel
(new temp-password action-result, reusing the copy-box UI) for the admin
to send to the user.
- Backstage top-left logo now links to the portal (main menu).
Temp passwords are generated + hashed at request time; never stored in git
or logged.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Jonathan Hvid
096c9bc297