Add password reset, order confirmation email with editable templates, and fix missing account entry points

Password reset uses Payload's built-in forgot/reset-password flow,
customized to link to this app instead of the Payload admin. Order
confirmation email and the password-reset email's wording both come from
a new Payload email-templates collection, editable without a deploy and
previewable via Live Preview at /email-preview/[type] (same mechanism as
Posts/LegalPages/Testimonials, sample data instead of a real document).

Also: order numbers get a random suffix (prevents guessing, motivated by
a considered-and-deferred guest order-lookup feature); the discount code
field only shows in the cart when a code is actually active (codes now
apply via a ?code= link instead of manual entry); and three navigation
gaps found while testing — no reachable login link with an empty cart, no
logout link anywhere, no way back from profile to order history.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/lib/payload.ts

@@ -603,3 +603,36 @@ export async function getLegalPage(type: LegalPageType, options?: { draft?: bool
         : null,
   };
 }
+
+export type EmailTemplateType = "order-confirmation" | "password-reset";
+
+type PayloadEmailTemplate = {
+  type: EmailTemplateType;
+  subject: string;
+  heading: string;
+  bodyText: string;
+  footerText: string | null;
+};
+
+// draft:true is used by app/email-preview/[type]/page.tsx (Live Preview,
+// see EmailTemplates.ts in the Payload repo); the real send (orderEmail.ts,
+// Customers.ts's forgotPassword hook) always reads the published version.
+export async function getEmailTemplate(
+  type: EmailTemplateType,
+  options?: { draft?: boolean },
+): Promise<PayloadEmailTemplate | null> {
+  const params = new URLSearchParams({
+    "where[tenant.slug][equals]": TENANT_SLUG,
+    "where[type][equals]": type,
+    limit: "1",
+  });
+
+  const res = await fetch(`${PAYLOAD_URL}/api/email-templates?${params}`, livePreviewCacheOption(Boolean(options?.draft)));
+  if (!res.ok) {
+    console.error(`getEmailTemplate: Payload returned ${res.status} ${res.statusText}`);
+    return null;
+  }
+
+  const data: { docs?: PayloadEmailTemplate[] } = await res.json();
+  return data.docs?.[0] ?? null;
+}