feat: password reset, email change with verification, and password change

Password reset: multi-app support with custom notification linking to correct
frontend (app/portal/admin). Email change: self-service with password
confirmation and admin-initiated, both sending verification to new address
with 24h expiry. Confirmation sent to old email on completion. Password
change: authenticated endpoint revoking other sessions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

api/resources/views/emails/email-changed-confirmation.blade.php

@@ -0,0 +1,12 @@
+@component('mail::message')
+# Je e-mailadres is gewijzigd
+
+Hallo {{ $userName }},
+
+Het e-mailadres van je Crewli-account is zojuist gewijzigd naar **{{ $newEmail }}**.
+
+Als je deze wijziging niet hebt aangevraagd, neem dan onmiddellijk contact met ons op.
+
+Groeten,<br>
+Crewli
+@endcomponent