Re-send a verification email

For when the first email was lost or its send failed. Always answers 200 with the same generic message, whether or not an account exists and whether or not it is already verified — the same anti-enumeration posture as POST /api/v1/auth/forgot-password. A client cannot learn anything about an address from the response.