KemalIdentity::Accounts::PasswordResetRequested

Somebody asked to reset the password on this account.

This struct carries a raw token, and it is the only place one leaves the shard

token is the secret the link must contain — the application cannot build a URL from a digest, so there is no version of this that does not hand it over. Everything downstream of here is the application's responsibility, and docs/02-security-model.md's token rules still apply to it: never log it, never store it, and prefer a form post over a query string so it does not reach a Referer header.

It is a Secret, so an accidental interpolation into a log line prints [REDACTED] rather than a working password reset.