f8edfd7746
Create verified cabinet accounts for email-based guest purchasers: - Auto-generate password for new/existing users without password_hash - Auto-login JWT token (72h TTL) stored once at fulfillment - POST /login/auto endpoint with rate limiting (5 req/60s) - Credentials email template (5 languages) - Fix forgot_password for guest-created email users - Clear plaintext password from DB after email delivery - TTL-capped credential exposure (24h delivered, 72h pending_activation) - DB cleanup of expired credentials on poll