add forget password

app/login/api/engine/reset_password_otp.php

@@ -0,0 +1,17 @@
+<?php
+
+require '../../../session.php';
+define('UNAUTHENTICATED_ROUTE', true);
+require '../../../assets/utils/db_auth.php';
+
+if (empty($_SESSION['reset_user_id'])) {
+    http_response_code(400);
+    exit(json_encode(['success' => 0, 'message' => 'No active reset request. Please request a new OTP.']));
+}
+
+$user_id = (int)$_SESSION['reset_user_id'];
+
+require_once $include_url . 'assets/utils/classes/PasswordResetManager.php';
+
+$manager = new PasswordResetManager($pdo1, $pdo2, $include_url, $SMTP, $pinkey);
+$manager->handleConfirmReset($user_id, $data);