R2 accounts in decePub: forgotten password, email by code, sessions, the theme kept with the login

Completion program R2, with PrivaPub's routes of the same release.

- Pages/PasswordRecovery.razor (/password-recovery): asks for a login or an address and shows the server's one
  sentence; with ?rc= it takes the code out of the address bar at once, checks it and sets a new password. Login links
  there ("Forgot your password?").
- Settings, the login: its email address with a verified badge, changed with the password and the code emailed to it
  (DOtp), removed with the password; "Sign out everywhere" (every device and persona, asked first).
- A password change takes the new JWT PrivaPub answers and exchanges the persona's token again, since every persona
  token ended with it.
- The theme kept with the login (PageSettings.SyncWithLogin, Settings > General): taken at sign-in and start-up once a
  client saved it, saved 1.5 s after a change here, never posted back when nothing changed, never the language.
- Login, Setup and Join start the session through CascadingState.SignedIn, which takes the login's theme.
- 38 keys in both resx files; CLAUDE.md follows.

Verified: dotnet build decePubClient.csproj -c Release (0 errors, no new warnings).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

Services/TokenAuthStateProvider.cs

@@ -89,6 +89,16 @@ namespace decePubClient.Services
 			await Save(session, cancellationToken);
 		}
 
+		/// <summary>Drops every persona's token: PrivaPub revoked them all (a password change), and each is exchanged anew when used.</summary>
+		public async Task ForgetPersonaTokens(CancellationToken cancellationToken = default)
+		{
+			var session = await GetAuthData(cancellationToken);
+			if (session.PersonaTokens.Count == 0)
+				return;
+			session.PersonaTokens.Clear();
+			await Save(session, cancellationToken);
+		}
+
 		public async Task LogoutAsync(CancellationToken cancellationToken = default)
 		{
 			logger.LogInformation($"set null({nameof(LogoutAsync)})");