Verifies the OTP received from POST /auth-forgot-password and sets a new password.
password and confirm_password must match. OTP is consumed on success.
All existing sessions across every device are invalidated immediately after the password is updated.
Valid Nigerian phone number
^(\+234[0-9]{10}|0[0-9]{10})$"+2348012345678"
4 - 8"482910"
8 - 72"S3cure!Pass"
8 - 72"S3cure!Pass"