Postamis auth spike

Stage 12 — proving Better Auth email-OTP delivers via Cloudflare Email.

Test via the API (see README):

1. POST /api/auth/email-otp/send-verification-otp { email, type: "sign-in" }
2. POST /api/auth/sign-in/email-otp { email, otp }