Refactor password reset to use dedicated Keycloak admin client

- Add Keycloak admin credentials configuration to environment variables
- Extract Keycloak admin operations into reusable utility module
- Refactor forgot-password endpoint to use new admin client utility
- Add documentation for Keycloak custom login implementation
- Add password reset fix summary documentation

This improves code organization by separating admin operations from
business logic and provides proper admin credentials for Keycloak
API operations instead of using regular client credentials.

.env.example

@@ -10,6 +10,10 @@ NUXT_KEYCLOAK_CLIENT_ID=monacousa-portal
 NUXT_KEYCLOAK_CLIENT_SECRET=your-keycloak-client-secret
 NUXT_KEYCLOAK_CALLBACK_URL=https://portal.monacousa.org/auth/callback
 
+# Keycloak Admin Configuration (for password reset and admin operations)
+NUXT_KEYCLOAK_ADMIN_CLIENT_ID=admin-cli
+NUXT_KEYCLOAK_ADMIN_CLIENT_SECRET=your-admin-cli-client-secret
+
 # Cookie Configuration
 COOKIE_DOMAIN=.monacousa.org