Tenant owners can request a reset link using their registered email.
Staff users should contact their tenant administrator.
For security, we always show the same response after a request.