Your dashboard password is a secret on your Worker, so resetting it needs your Cloudflare login, not an email.
From your clone:
npx datapenny password
It asks for a new password of 12 or more characters and stores it. Every browser then has to sign in again.
Without the CLI, from apps/worker:
npx wrangler secret put DASHBOARD_PASSWORD
Sign-in allows 10 attempts per 15 minutes from one IP address.