Add email required validation and email verification flow

[Copilot]

Email addresses were stored without format validation or ownership verification. This adds format enforcement, required-email gating for email notifications, and a full verification flow.

DB

• Migration adds email_verified BIT(1) NOT NULL DEFAULT 0, email_verify_token VARCHAR(64) NOT NULL DEFAULT '', and modifies email to VARCHAR(255) NOT NULL DEFAULT '' on users
• User.email changed from Option<EncryptedString> to EncryptedString (empty string = not set); email_verified: bool and email_verify_token: String added
• New get_user_by_email_verify_token(token) DB method + trait entry

API

• PATCH /api/v1/account:
  • Validates email format (@ + . check)
  • Email is required — attempting to clear/remove it returns an error
  • Returns error if contact_email: true with no email set
  • On email change: sets email_verified = false, generates 32-byte hex token, persists it, queues SendEmailVerification job
• New GET /api/v1/account/verify-email?token=<token>: sets email_verified = true and clears the token; returns a styled HTML page (via verify-email.html mustache template) confirming success or showing an error message (no auth required — link is the credential)
• GET /api/v1/account response now includes email_verified: bool (read-only; ignored on PATCH)

Worker

• New WorkJob::SendEmailVerification { user_id, verify_url } handled by send_email_verification()
• Shared send_email(smtp, to, subject, message) static helper used by both send_notification and send_email_verification, eliminating duplicated SMTP/template logic
• email.html converted to mustache template ({{message}}, {{year}})
• New verify-email.html mustache template ({{title}}, {{message}}, {{color}}) included via include_str!

Admin

• AdminUserInfo now exposes email_verified for visibility in the admin panel

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Make email requred</issue_title>
<issue_description>- [ ] Make the email address required field

• Add email verification flow</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Make email requred #43

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.