apply security fix

apps/api/src/modules/auth/auth.account.service.ts

@@ -2,6 +2,7 @@ import bcrypt from 'bcryptjs'
 import crypto from 'crypto'
 import { AppError } from '../../http/errors'
 import { prisma } from '../../lib/prisma'
+import { hashPublicAccessToken } from '../../security/publicAccessTokens'
 import { sendTransactionalEmail } from '../../services/notificationService'
 import * as repo from './auth.company.repo'
 import type { output } from 'zod'
@@ -81,7 +82,7 @@ export async function startAccount(body: AccountStartInput) {
         lastName: '',
         email: body.email,
         passwordHash,
-        emailVerificationToken: verificationToken,
+        emailVerificationToken: hashPublicAccessToken(verificationToken),
         role: 'OWNER',
         preferredLanguage: body.preferredLanguage,
         isActive: true,