POST /verify/otp

curl -X POST http://localhost:8080/verify/otp \
  -H "X-API-Key: lfy_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "email":"hello@example.com",
    "code":"483920"
  }'

{
  "verified": true,
  "message": "OTP verified"
}

{
  "error": "invalid or expired OTP"
}