feat: email verification, merchant/store password reset, seed gap fix

- Add EmailVerificationToken and UserPasswordResetToken models with migration
- Add email verification flow: verify-email page route, resend-verification API
- Block login for unverified users (EmailNotVerifiedException in auth_service)
- Add forgot-password/reset-password endpoints for merchant and store auth
- Add "Forgot Password?" links to merchant and store login pages
- Send welcome email with verification link on merchant creation
- Seed email_verification and merchant_password_reset email templates
- Fix db-reset Makefile to run all init-prod seed scripts
- Add UserAuthService to satisfy architecture validation rules
- Add 52 new tests (unit + integration) with full coverage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Makefile

@@ -173,6 +173,12 @@ db-reset:
 	$(PYTHON) -m alembic upgrade head
 	@echo "Initializing production data..."
 	$(PYTHON) scripts/seed/init_production.py
+	@echo "Initializing log settings..."
+	$(PYTHON) scripts/seed/init_log_settings.py
+	@echo "Creating default CMS content pages..."
+	$(PYTHON) scripts/seed/create_default_content_pages.py
+	@echo "Seeding email templates..."
+	$(PYTHON) scripts/seed/seed_email_templates.py
 	@echo "Seeding demo data..."
 ifeq ($(DETECTED_OS),Windows)
 	@set SEED_MODE=reset&& set FORCE_RESET=true&& $(PYTHON) scripts/seed/seed_demo.py