List my verification sessions

The caller's own verification sessions (one row per provider and type). Self-scoped: a filter narrows this set and can never reach another account's rows. With NO query string the response is the legacy {success, data:[...], count} shape, every row, provider ASC — unchanged for existing clients. With limit or offset the response is the ADR 0003 envelope {success, data:{items, total, filtered, limit, offset}}: total is the caller's row count before filters, filtered after, items one page; limit=0 returns the counts alone. Filters or a sort WITHOUT limit/offset return the legacy shape over the filtered, sorted rows. status/type/provider are comma-separated ORs; an unrecognised member matches nothing (never a 400). q is a case-insensitive substring match over session_id, provider, status and last_error. from/to bound "last moved" = verified_at, else updated_at: YYYY-MM-DD is an inclusive whole UTC day, RFC3339 an exact instant (to exclusive); malformed is a 400. since/until and created_after/created_before are accepted as aliases. Every sort tiebreaks on id in the same direction, so pages never repeat or skip a row. An unknown query KEY is 400 unknown_param.