feature: password reset via OTP + example local config

[Dilinaraveen]

Summary

Implements password reset flow with OTP:

• POST /api/v1/auth/reset/initiate
• POST /api/v1/auth/reset/complete

Details

• OTP stored in Redis (TTL 10m, one-time use, basic rate limit)
• Emails delivered via existing EmailService
• Passwords updated in Firestore using BCrypt
• Added spring-boot-starter-validation
• springdoc upgraded for Boot 3.5 compatibility (if applicable)

Config

• Added application-local.example.properties (no secrets)
• .gitignore excludes application-local.properties

Testing

• Postman steps included:
  1. POST /api/v1/auth/reset/initiate { "email": "" } -> 204
  2. Receive OTP (email or Redis GET), then
     POST /api/v1/auth/reset/complete { "email":..., "otp":"123456", "newPassword":"..." } -> 204
• Verified Firestore password hash updated, Redis key deleted, mail sent.

Security

• Avoids user enumeration (initiate always 204, complete 400 on bad OTP)
• BCrypt hashing everywhere for new/updated passwords
• No secrets committed; docs show env-based setup

Closes #3

[Prathamesh-007]

Please explain why the FirestoreService.java was delete?

[Prathamesh-007]

Also, where is OTP getting generated?

[Prathamesh-007]

Closing the PR since no explanation provided. Happy hacking!