This account cannot reset its password
POST /api/auth/reset-password found a valid reset token, but the account is banned (bannedAt after reconcile). Returns 403 with this message.
Why this happens
Banned members cannot set a new password via the reset link. Distinct from This reset link is invalid or has expired (bad/expired token — later phase) and from Invalid reset link (no token in URL).
Diagnose and fix
1. Admin: review Banned users / IPs; unban if appropriate.
2. After unban, member requests a new forgot-password email and resets again.
3. Do not reuse the old reset link after status changes.
4. Distinct from normal Could not update password / validation failures.