feat(api): 会话记录设备与最近活动，账户页可查看并退出任一设备，删除 passkey 或更换邮箱时退出其它设备，staff 会话空闲 30 分钟失效，吊销会话校验所属用户

internal/api/handlers_email_otp.go

@@ -249,6 +249,11 @@ func (a *API) handleEmailOTPVerify(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 	a.audit(r, "account.email.verified", "")
+	// Replacing a verified address moves where sign-in codes go, so a session
+	// opened through the old one ends. A first verification retires nothing.
+	if p.EmailVerified && !strings.EqualFold(p.Email, email) {
+		a.revokeOtherSessionsAfter(r, "email change")
+	}
 	writeJSON(w, http.StatusOK, map[string]any{"verified": true, "email": email})
 }