post
https://api.valmarpayments.com/auth/forgot-password/request
Public endpoint. Sends a one-time password reset code to the given email when an account exists. Always returns a generic success message to avoid account enumeration. Bypasses Cognito ForgotPassword so Email MFA users can still recover via email.