async fn sync_emails(
services: State,
user_id: &UserId,
desired: BTreeSet<String>,
) -> ResultExpand description
Reconcile the user’s bound email addresses to exactly desired. A desired
address bound to another user is reassigned, its prior binding removed first
so no dangling forward row survives.