Set up a reusable verified identity.

The goal is to keep signup short: create the account, then run the PrivateAV check once so the verified state can be reused across the network.

Passwords are hashed server-side and never stored in plaintext.