A community based topic aggregation platform built on atproto

feat: Add phone verification service layer master

Implement verification service with security-first design: - Cryptographically secure OTP generation (crypto/rand) - Rate limiting (3/hour per phone, 5/day per DID) - Constant-time OTP comparison (bcrypt) - Signature binding to subject DID (prevents copying attack) - Comprehensive error types for XRPC handlers Service interfaces support future verification types (email, domain). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>


+544
3 changed files