Request a PIN reset

Marks the lock for reset and drops every unlock window. Grants nothing on its own: the PIN is cleared at the next genuine Privy authentication, so the caller must complete a real sign-in to benefit. The client follows this with a full sign-out of both DRE and Privy.