Fix(oauth)!: require verified email before logging in via social login

Hardened OAuth by fixing a boolean logic bug in email verification and normalizing verification signals across OAuth providers (Google, GitHub, Facebook, Office 365, Frappe-as-IdP). Users logging in via social login now have their email verified before account access is granted.