<div class="auth-heading"><p class="eyebrow">Account recovery</p><h1>Forgot Password</h1><p>Enter your email address and, if an account exists, we'll send a reset link.</p></div>
<?php if (!empty($message)): ?><div class="alert alert-success" role="status"><?= htmlspecialchars($message, ENT_QUOTES, 'UTF-8') ?></div><?php endif; ?>
<form method="post" action="/crm/public/forgot-password" class="form-stack">
    <input type="hidden" name="_csrf" value="<?= htmlspecialchars($csrf, ENT_QUOTES, 'UTF-8') ?>">
    <label class="form-field"><span>Email</span><input type="email" name="email" autocomplete="email" required autofocus></label>
    <button class="btn btn-primary btn-block" type="submit">Send reset link</button>
</form>
<p class="auth-link"><a href="/crm/public/login">Back to login</a></p>
