CHW-4110 ResetTokenInvalid

invalid or expired reset link

Default message: invalid or expired reset link
HTTP status: 400 (client)

Problem. The password reset token in the request does not exist. Cause. Mistyped token, different deployment, or security rotation invalidated it. Fix. Request a fresh reset email via the forgot-password flow. HTTP 400.