post:
  operationId: resetPassword
  summary: Reset staff password
  description: |
    Permission: **ADMIN, OWNER**

    Generates a new temporary password for an active staff account, marks
    `must_change_password = true`, clears password lock state, and sends
    the temporary credential to the staff email address. Inactive and
    deactivated staff accounts are blocked.
  tags: [staffManagement]
  requestBody:
    required: true
    content:
      application/json:
        schema:
          $ref: "../../components.yaml#/components/schemas/ResetPasswordRequest"
        example:
          staff_id: "6643f1a2b4c5d60012e34abc"
  responses:
    "200":
      description: Password reset — DTO returned directly
      content:
        application/json:
          schema:
            $ref: "../../components.yaml#/components/schemas/ResetPasswordResponse"
          example:
            code: 0
            message: "success"
            staff_id: "6643f1a2b4c5d60012e34abc"
    "400":
      $ref: "../../components.yaml#/components/responses/Failure"