Open password reset flow from browser link click

Browser-oriented password reset link flow.

This endpoint is intended for users clicking password reset links in email. It validates the token on the backend and redirects the browser to the stored, validated redirectTo URL with the reset token in the query string.

Redirect query params:

• Ready: token=...&insforge_status=ready&insforge_type=reset_password
• Error: insforge_status=error&insforge_type=reset_password&insforge_error=...
• token: present only when insforge_status=ready
• insforge_status: ready or error
• insforge_type: always reset_password
• insforge_error: present only on error, human-readable message

Your app should render the reset-password form only when insforge_status=ready and token is present.