/frontend/comm/email/login/ | TEST/STAGING AND PRODUCTION

_verification.php: email, verification_code. Six-digit code expires in ten minutes.
_password_reset.php: email, reset_url. Single-use link expires in one hour.
No CC on either template. Do not add an admin CC to private codes/reset links.
Both are editable in the existing template editor. Keep expiration wording synchronized
with /login/email-action.php and /login/email-security.php when changing it.
Phone delivery is intentionally unavailable until carrier approval and SMS integration.