Staking points for the signed-in user's wallet

Points earned by staking, what has been redeemed here, and what is left.

The two halves come from different places on purpose. earned is read per request from the staking service, which recomputes it from on-chain events; spent is this service's own append-only ledger. available is the difference, floored at zero.

The wallet is the one on the account, proven by a SIWE signature at sign-in — there is no way to ask about another address.

can_redeem is false until the account has a real, verified email: a wallet signature proves possession of a key, not a reachable person, and redeem_blocked_reason says what to do about it.