Marketplace 2FA: Polling SMS OTP Delivery Status Without Webhooks

The operational constraint is that delivery events are pull-based, so a marketplace login cannot wait...