feat: implement api for "forgot password?" flow (#14915)

Relates to https://github.com/coder/coder/issues/14232

This implements two endpoints (names subject to change):
- `/api/v2/users/otp/request`
- `/api/v2/users/otp/change-password`

coderd/notifications/events.go

@@ -24,6 +24,8 @@ var (
 	TemplateUserAccountActivated = uuid.MustParse("9f5af851-8408-4e73-a7a1-c6502ba46689")
 	TemplateYourAccountSuspended = uuid.MustParse("6a2f0609-9b69-4d36-a989-9f5925b6cbff")
 	TemplateYourAccountActivated = uuid.MustParse("1a6a6bea-ee0a-43e2-9e7c-eabdb53730e4")
+
+	TemplateUserRequestedOneTimePasscode = uuid.MustParse("62f86a30-2330-4b61-a26d-311ff3b608cf")
 )
 
 // Template-related events.

coderd/notifications/notifications_test.go

@@ -895,6 +895,16 @@ func TestNotificationTemplatesCanRender(t *testing.T) {
 				},
 			},
 		},
+		{
+			name: "TemplateUserRequestedOneTimePasscode",
+			id:   notifications.TemplateUserRequestedOneTimePasscode,
+			payload: types.MessagePayload{
+				UserName: "Bobby",
+				Labels: map[string]string{
+					"one_time_passcode": "fad9020b-6562-4cdb-87f1-0486f1bea415",
+				},
+			},
+		},
 	}
 
 	allTemplates, err := enumerateAllTemplates(t)

coderd/notifications/testdata/rendered-templates/TemplateUserRequestedOneTimePasscode-body.md.golden

@@ -0,0 +1,7 @@
+Hi Bobby,
+
+A request to reset the password for your Coder account has been made. Your one-time passcode is:
+
+**fad9020b-6562-4cdb-87f1-0486f1bea415**
+
+If you did not request to reset your password, you can ignore this message.

coderd/notifications/testdata/rendered-templates/TemplateUserRequestedOneTimePasscode-title.md.golden

@@ -0,0 +1 @@
+Your One-Time Passcode for Coder.