Verify auth-actions.ts:1572 .email compare without canonicalizeEmail is not a match gate

coder-venus-cc VENUS-281 follow-up: pre-existing advisory — auth-actions.ts:1572 does a TS .email comparison without canonicalizeEmail. Confirm it is not an identity/match gate (if it is, it must canonicalize per evolutiva-commons Email Identity). Investigation-first.