feat: password reset, email change with verification, and password change

Password reset: multi-app support with custom notification linking to correct
frontend (app/portal/admin). Email change: self-service with password
confirmation and admin-initiated, both sending verification to new address
with 24h expiry. Confirmation sent to old email on completion. Password
change: authenticated endpoint revoking other sessions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/app/src/layouts/components/UserProfile.vue

@@ -76,6 +76,17 @@ function handleLogout() {
 
         <VDivider class="my-2" />
 
+        <VListItem :to="{ name: 'account-settings' }">
+          <template #prepend>
+            <VIcon
+              class="me-2"
+              icon="tabler-settings"
+              size="22"
+            />
+          </template>
+          <VListItemTitle>Accountinstellingen</VListItemTitle>
+        </VListItem>
+
         <VListItem
           :disabled="isLoggingOut"
           @click="handleLogout"