Confirm the new address

The step that actually moves the account. The new address becomes the account email and is marked verified — it just proved itself by receiving this. The old address is notified after the fact; it cannot undo the change, but silence is how someone finds out weeks later.