Shared requestToken spine for the email medium: throttle both axes, open or
reuse a pending verification, and send the magic-link message when a token
is freshly minted. The caller supplies the already-canonicalized address and
performs its own directional in-use / not-found check beforehand.