OTP confirmation — Resend & Rate Limiter

Goal: Send code to a @qa.team email, request a resend (requires waiting out the countdown), recover from rate limit errors, and verify the latest code.