Show verification and profile columns and request verification in IAM

[roncodes]

Why

In IAM an admin could only Verify user, which marks the email verified. They couldn't:

• see whether a user's email or phone is verified;
• ask the user to verify either one;
• mark a phone verified.

Several useful fields the API already returns weren't shown either.

Changes

• Columns
  • Email Verified and Phone Verified, visible. A new table/cell/verification-status cell shows a Verified badge (verified date in the tooltip), Unverified, or a dash when there's no email/phone. Each has a Verified/Unverified filter (email_verified, phone_verified).
  • Country, Timezone, Date of Birth and IP Address, hidden by default and available from the column picker. Country and timezone have filters.
• Row actions (iam verify user, each shown only when that email/phone is set and unverified):
  • Send email verification and Send phone verification send the user a one-click link that works without signing in.
  • Mark email verified and Mark phone verified.
  • These replace the single "Verify user", which only covered email.
• user-actions service: new sendVerification(user, channel) and markVerified(user, channel). verifyUser() still works and marks the email verified, so other engines calling it are unaffected.

Depends on

• Let IAM admins request and record email/phone verification core-api#267: the send-verification endpoint, the channel param on users/verify, and the new filters.
• Add the verification link page and register the email change route fleetbase#673: the auth/verify-contact page the link opens.

This touches the same users controller and translations as #35, so expect a small conflict on the queryParams line: #35 drops type, and this adds four params.

Testing

• Unit tests cover which actions appear for set/unverified email and phone, the filter options, and which columns are hidden by default.
• Lint runs in CI; it couldn't run locally in this clone.