Validating user email after account lockout

Description

As a system, I want to validate that a user-provided email exists in the database so that I can ensure password reset requests are legitimate.

Acceptance Criteria

• The system checks if the provided email is associated with an existing account.
• If the email is not found, the system returns a generic message to avoid exposing account existence.
• Validation attempts are logged for auditing purposes.