Add email verification signup flow

[dana-khaing]

Summary

• add email verification tokens and backend verification/resend endpoints
• block login for unverified password accounts while keeping password reset separate
• add frontend verify-email page and login resend verification UX

Testing

• cd flowbit-backend && venv/bin/python manage.py test core.tests.AuthAPITests.test_login_rejects_unverified_account_even_with_correct_password core.tests.AuthAPITests.test_verify_email_activates_user core.tests.AuthAPITests.test_verify_email_rejects_invalid_token core.tests.AuthAPITests.test_resend_verification_sends_new_email_for_inactive_user core.tests.AuthAPITests.test_reset_password_does_not_activate_unverified_account core.tests.AuthAPITests.test_reset_password_completes_with_valid_token --settings=flowbit_backend.test_settings
• cd flowbit-frontend && pnpm exec tsc --noEmit

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
flowbit	Ready	Preview, Comment	May 24, 2026 1:28pm

[supabase]

This pull request has been ignored for the connected project tmtjclyahxilghveefxa because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.