[H7] Unit: password-reset token validation (positive, negative, double-use)

[nanaf6203-bit]

File: test/auth/

Add unit tests for: valid token redeems successfully; expired token is rejected; already-used token is rejected on second attempt.