A REST API State Machine for Email Verification

Model email verification as explicit REST API states with PostgreSQL constraints, idempotent retries, and safe token and mailbox expiry.