Fix/reset password expired token handling

[AMDYFX]

Summary

Added test coverage for expired, invalid, and already-used password reset tokens to ensure users receive a clear and actionable recovery experience when attempting to use an unusable reset link.

Changes

• Added tests for the password reset flow covering invalid and expired reset tokens.
• Added coverage for already-used reset tokens.
• Verified the UI presents a clear message explaining that the reset link is no longer valid.
• Added/verified a recovery path directing users back to the forgot-password flow to request a new reset link.
• Covered the relevant states across forgot-password/page.tsx and reset-password/page.tsx.
• Kept the behavior consistent with the existing authentication and error-handling patterns.

Validation

• Verified expired reset tokens produce an explicit, user-friendly error state.
• Confirmed invalid and already-used tokens are handled without exposing generic or confusing failures.
• Verified users can navigate back to request a new password reset link.
• Ran the relevant authentication/frontend tests and checks.

Acceptance Criteria

• Test expired reset-token handling.
• Test invalid and already-used token scenarios.
• Display a clear and actionable error message.
• Provide a path to request a new reset link.
• Verify the behavior through automated tests.

closes #1376
closes #1375
closes #1377
closes #1371

[vercel]

@AMDYFX is attempting to deploy a commit to the Mftee's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@AMDYFX Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[mftee]

No merge conflicts with main. Good fix for expired-token handling in the reset-password flow - approving.