Fix login page UX + add password reset flow

- Move Field component outside RegisterForm — fixes focus loss on every keystroke
- Remove setError('') at submit start — fixes error "flash" that looked like page reload
- Clear errors onChange instead, so error persists until user starts correcting
- Add 'Forgot password?' link in LoginForm
- Add ForgotPasswordForm (email input, success state)
- Add ResetPasswordPage at /reset-password?token=...
- Backend: POST /api/auth/forgot-password — generates 1h token, sends email
- Backend: POST /api/auth/reset-password — validates token, updates password hash
- Backend: migration 006 — reset_token/reset_token_expires columns
- Backend: sendPasswordResetEmail in email.ts

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/App.tsx

@@ -35,6 +35,7 @@ import { MaintenancePage } from './pages/MaintenancePage'
 import { DiscountsPage } from './pages/DiscountsPage'
 import { GuestReviewPage } from './pages/GuestReviewPage'
 import { GuestRoomServicePage } from './pages/GuestRoomServicePage'
+import { ResetPasswordPage } from './pages/ResetPasswordPage'
 
 export default function App() {
   return (
@@ -46,7 +47,8 @@ export default function App() {
           <BrowserRouter>
             <Routes>
               {/* Public */}
-              <Route path="/login" element={<LoginPage />} />
+              <Route path="/login"          element={<LoginPage />} />
+              <Route path="/reset-password"    element={<ResetPasswordPage />} />
               <Route path="/review/:slug"       element={<GuestReviewPage />} />
               <Route path="/room-service/:slug" element={<GuestRoomServicePage />} />