FWIW:

• programmatically triggering a "Password Forgotten" request on PM is implemented.
• pulling an email by sender name via Mail::IMAPClient works too with a "simple" email account

The giant PITA here turns out to be Gmail, which requires some extra configuration plus an "App-Password" for untrusted clients. It seems this app-password is used instead of the real password (?) and that this mechanism is due to be deactivated from 2025 on (WTF?).

So the only viable route seems to be to only poll one reliable email account and to forward from all others to this one.

So the plan is:

• Whenever the monitoring script runs it'll check via IMAP if the emails from the last run arrived.
• Otherwise it will generate a report.
• I think once per day is enough
• Probably emailing it to the god's account.

Comments?