Route verification-code emails to security on-call before takeover

Your verification-code emails land in a shared inbox, causing potential unattended account access attempts and delayed incident response. Security on-call receives parsed codes and context immediately so investigations start before outreach SLAs lapse.