Changes to POST `/api/v0/main-frontend/email-verification/verify` - Spends a mailed code and records the proof. Authenticated and scoped to the caller's own account, so the code is the only secret involved and it never has to identify anybody on its own.