UserControllerCE evidence

File:
- /C:/Users/moabd/OneDrive/Documents/New project/appsmith-src/app/server/appsmith-server/src/main/java/com/appsmith/server/controllers/ce/UserControllerCE.java

Relevant lines from local review:
- 91-94: forgotPassword path stores request Origin into DTO baseUrl
- 189-193: resendEmailVerification path stores request Origin into DTO baseUrl

Interpretation:
- trusted base URL is still seeded from caller-controlled request metadata
