feat(users): add admin-granted verified badge for trusted contributors

- migration 0002: users.verified boolean, default false
- verified rides in the JWT (role + verified claims)
- POST /users/{id}/verify + /unverify, admin-only (403 otherwise)
- Issue now takes the whole user so trust claims travel in the token
- unit + integration + admin-flow tests

users/internal/transport/http/dto.go

@@ -23,6 +23,7 @@ type userResponse struct {
 	ID        string `json:"id"`
 	Email     string `json:"email"`
 	Role      string `json:"role"`
+	Verified  bool   `json:"verified"`
 	CreatedAt string `json:"created_at"`
 }
 
@@ -36,6 +37,7 @@ func toUserResponse(u *domain.User) userResponse {
 		ID:        u.ID.String(),
 		Email:     u.Email,
 		Role:      string(u.Role),
+		Verified:  u.Verified,
 		CreatedAt: u.CreatedAt.UTC().Format(time.RFC3339),
 	}
 }