Node.js Email Verification Needs Atomic Tokens

Design a race-safe Node.js email verification flow with PostgreSQL transactions, one-time tokens, expiry, and clear API failure states.