fix: allow email change for unverified emails without code verification

Skip code-based flow for unverified emails — replace email directly
and send verification to the new address. Show success step immediately
instead of asking for a verification code.

src/api/auth.ts

@@ -110,7 +110,9 @@ export const authApi = {
   },
 
   // Request email change - sends verification code to new email
-  requestEmailChange: async (newEmail: string): Promise<{ message: string }> => {
+  requestEmailChange: async (
+    newEmail: string,
+  ): Promise<{ message: string; new_email: string; expires_in_minutes: number }> => {
     const response = await apiClient.post('/cabinet/auth/email/change', {
       new_email: newEmail,
     });

src/pages/Profile.tsx

@@ -181,10 +181,17 @@ export default function Profile() {
   // Email change mutations
   const requestEmailChangeMutation = useMutation({
     mutationFn: (emailAddr: string) => authApi.requestEmailChange(emailAddr),
-    onSuccess: () => {
+    onSuccess: async (data) => {
       setChangeError(null);
-      setChangeEmailStep('code');
+      if (data.expires_in_minutes === 0) {
-      setResendCooldown(UI.RESEND_COOLDOWN_SEC);
+        // Unverified email was replaced directly
+        setChangeEmailStep('success');
+        const updatedUser = await authApi.getMe();
+        setUser(updatedUser);
+      } else {
+        setChangeEmailStep('code');
+        setResendCooldown(UI.RESEND_COOLDOWN_SEC);
+      }
     },
     onError: (err: { response?: { data?: { detail?: string } } }) => {
       const detail = err.response?.data?.detail;