Password reset when the account is unconfirmed

For GiveCampus accounts and administrator access.

In the general password-recovery flow, a persisted non-guest account that is still unconfirmed receives confirmation instructions as well as the password-reset email, with a message to confirm first. Password reset and account confirmation are separate. Use the intended account email, check the newest messages, and ask support to inspect delivery/account state when neither arrives; do not repeatedly create accounts. School SSO follows its own authentication path.