Opt the user out of all collaboration notifications.

The opt-out is global: it suppresses skill-share emails as well as team invitations and skill/template ownership-transfer emails.

Accepts the token from the form body (preferred, from the confirm page) or from the query string (fallback for deep-link POSTs). Idempotent.