fix(security): validate redirect_uri to prevent open redirect attacks

[lakhansamani]

Summary

• Added isValidRedirectUri() validation in AuthorizerResetPassword.tsx — redirect_uri is now validated against same-origin and configured redirect URL before use in window.location.href
• Prevents attacker-controlled redirect_uri from redirecting users to malicious sites after password reset

Companion PRs

• fix(security): validate redirect_uri to prevent open redirect attacks authorizer#579 (main login app fix)

Test plan

• Verify password reset redirects work for same-origin URLs
• Verify cross-origin redirect to evil.com is blocked
• Verify configured redirect_uri still works

[github-actions]

size-limit report 📦

Path	Size
dist/index.cjs	46.92 KB (+0.54% 🔺)
dist/index.mjs	46.82 KB (+0.31% 🔺)