Partner account recovery

Reset partner access without losing your intake and payout lane.

For now, this DreamHost-safe recovery flow shows the temporary reset token in-app instead of emailing it, so the partner access path is still testable before outbound mail is fully live.