Email-Only Admin Password Reset

Adds a secure admin-only tool to trigger a WordPress password-reset email for any user, with rate-limiting and a full audit log — without exposing the reset link directly on screen.