Best practice for custom REST actions with API Platform

Question

This top-ranking Stackoverflow answer from 10 years ago suggests using POST /users/:user_id/reset_password to initiate a password reset.

I know the API platf