Re-poll the email provider for the current verification status. On-demand only — there is no background poller in v1. Operators / tenants hit this after publishing DNS to flip the row to ``verified``. Hail-mail rows are no-ops (they're already verified by construction).