Send address change confirmation emails with verification key

Subscribers' address change requests arrive unverified, causing fulfillment and billing to ship to old addresses. Send a short verification link so subscribers confirm updates within 20 minutes.