feat: add forgot password and username recovery flow

- Add Mailpit SMTP container to docker-compose for dev email capture
- Add nodemailer dependency for email sending
- Add password_reset_tokens table (PG + SQLite)
- Add POST /api/auth/forgot-username endpoint
- Add POST /api/auth/forgot-password endpoint (token-based, 1h expiry)
- Add POST /api/auth/reset-password endpoint
- Create ForgotPasswordModal component (choose mode → email → sent)
- Create ResetPasswordView (token-based new password form)
- Add forgot/recovery links to LoginModal
- Add i18n translations (ES/CA) for the full flow

apps/backend/.env.example

@@ -24,5 +24,16 @@ EXPO_ACCESS_TOKEN=
 # Genera una cadena aleatoria fuerte, p.ej.: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 INGEST_API_KEY=dev-ingest-key-change-me
 
+# SMTP for password reset / forgot username emails
+# Development: use Mailpit (docker) — no auth needed
+SMTP_HOST=localhost
+SMTP_PORT=1025
+SMTP_USER=
+SMTP_PASS=
+SMTP_FROM=noreply@farmafinder.com
+
+# Base URL for reset links in emails (your frontend URL)
+APP_URL=http://localhost:3000
+
 # Parapharmacy API
 PARAPHARMACY_API_URL=http://localhost:3002