Model methods should be private by default unless they need to be exposed via RPC on purpose (e.g. for the web client). The `send_forum_validation_email()` method is only called by a controller and has no reason to be exposed via RPC, hence the conversion to private. Closes #30669