feat: add forgot-password, s3 uploads, caching, and csv export

[Tinna23]

PR Title
Implement password reset, S3 uploads, caching, and CSV export

PR Description

• Add nodemailer-backed forgot/reset-password flow with hashed 32-byte tokens, one-hour expiry, MailModule, and new endpoints so users can recover their accounts securely (#527).
• Replace manual document URLs with an S3-backed StorageModule plus /assets/:id/documents/upload (multer, 10 MB, allowed file types) that stores documents and logs history when AWS_S3_BUCKET is set (#529).
• Configure CacheModule with optional Redis, cache departments/categories GETs for 5 minutes, and invalidate those caches on mutations via CacheInterceptor and manual invalidation (#530).
• Expand ReportsModule with a CSV export endpoint that reuses asset filters and streams assets-export.csv via json2csv (#533).

Closes #162
Closes #161
Closes #160
Closes #164

[drips-wave]

@Tinna23 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits