feat(auth,privacy,web): step-by-step login, privacy settings persistence, TOTP QR, and API docs

app/auth/service.py

@@ -16,6 +16,7 @@ from app.auth.token_store import (
     store_refresh_token_jti,
 )
 from app.auth.schemas import (
+    EmailStatusResponse,
     LoginRequest,
     RefreshTokenRequest,
     RegisterRequest,
@@ -343,3 +344,15 @@ async def get_current_user_for_ws(token: str, db: AsyncSession) -> User:
 
 def get_email_sender() -> EmailService:
     return get_email_service()
+
+
+async def get_email_status(db: AsyncSession, email: str) -> EmailStatusResponse:
+    user = await get_user_by_email(db, email)
+    if not user:
+        return EmailStatusResponse(email=email, registered=False)
+    return EmailStatusResponse(
+        email=email,
+        registered=True,
+        email_verified=user.email_verified,
+        twofa_enabled=user.twofa_enabled,
+    )