feat: email verification, merchant/store password reset, seed gap fix

- Add EmailVerificationToken and UserPasswordResetToken models with migration
- Add email verification flow: verify-email page route, resend-verification API
- Block login for unverified users (EmailNotVerifiedException in auth_service)
- Add forgot-password/reset-password endpoints for merchant and store auth
- Add "Forgot Password?" links to merchant and store login pages
- Send welcome email with verification link on merchant creation
- Seed email_verification and merchant_password_reset email templates
- Fix db-reset Makefile to run all init-prod seed scripts
- Add UserAuthService to satisfy architecture validation rules
- Add 52 new tests (unit + integration) with full coverage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/tenancy/models/__init__.py

@@ -28,6 +28,7 @@ from app.modules.tenancy.models.admin import (
     PlatformAlert,
 )
 from app.modules.tenancy.models.admin_platform import AdminPlatform
+from app.modules.tenancy.models.email_verification_token import EmailVerificationToken
 from app.modules.tenancy.models.merchant import Merchant
 from app.modules.tenancy.models.merchant_domain import MerchantDomain
 from app.modules.tenancy.models.platform import Platform
@@ -36,6 +37,7 @@ from app.modules.tenancy.models.store import Role, Store, StoreUser, StoreUserTy
 from app.modules.tenancy.models.store_domain import StoreDomain
 from app.modules.tenancy.models.store_platform import StorePlatform
 from app.modules.tenancy.models.user import User, UserRole
+from app.modules.tenancy.models.user_password_reset_token import UserPasswordResetToken
 
 __all__ = [
     # Admin models
@@ -54,6 +56,9 @@ __all__ = [
     # User
     "User",
     "UserRole",
+    # Tokens
+    "EmailVerificationToken",
+    "UserPasswordResetToken",
     # Store
     "Store",
     "StoreUser",