feat: add employee email verification on signup

- Signup sends verification email instead of auto-login; login blocks unverified emails
- New endpoints: POST /verify-email and POST /resend-verification
- New verify-email page in dashboard with token-based email confirmation
- DB migration adds emailVerified and emailVerificationToken fields to Employee
- Update sign-in/sign-up/reset-password flows to handle verification states
- Minor UI polish across dashboard and marketplace components
- Refactor marketplace-homepage types

apps/api/src/modules/auth/auth.employee.routes.ts

@@ -61,4 +61,18 @@ router.post('/reset-password', async (req, res, next) => {
   } catch (err) { next(err) }
 })
 
+router.post('/verify-email', async (req, res, next) => {
+  try {
+    const { token } = parseBody(employeeResetPasswordSchema.pick({ token: true }), req)
+    ok(res, await service.verifyEmail(token))
+  } catch (err) { next(err) }
+})
+
+router.post('/resend-verification', async (req, res, next) => {
+  try {
+    const { email } = parseBody(employeeForgotPasswordSchema, req)
+    ok(res, await service.resendVerification(email))
+  } catch (err) { next(err) }
+})
+
 export default router