Magic link

Passwordless email sign-in

📄️Send magic link

Always returns `{ data: { success: true } }` to prevent email enumeration.

📄️Verify magic link

Opened from the email link. **No API key.** Query: `token` (raw), `project` (project id). CORS follows project `allowedOrigins`.