The default-user-settings-flow was missing a PasswordStage, so users could edit name/email/locale but not their password. Added a PasswordStage (InbuiltBackend) bound at order 101. Documented the flow's stage table and the two ORM gotchas (MTI through model, required backends array).