Claim request assets

Claim the verified phone and email assets of a verification request that this browser is entitled to, by the HttpOnly __Host-proof_verifier cookie the verify routes set: a phone verification this browser started, or an email challenge this browser completed (code entered or link opened here). Holding the request id entitles nobody, and this route never writes a test-mode verification.