Close the remaining ciphertext joins and a SQL injection in email verification

- Customer-service notes joined to the account by comparing encrypted phone
  columns. Both notes tables now carry phone_key, written when a note is
  saved, and the three joins match on it.
- The email_verifications join was comparing a plaintext column against an
  encrypted one, so it never matched and `verified` was always NULL in both
  passenger and driver sign-in. It is now resolved in PHP against the
  decrypted address, which fixes a pre-existing bug rather than only
  preparing for GCM.
- auth/sendVerifyEmail.php built all three of its statements by interpolating
  the request values into SQL. Any caller could inject through the email or
  token field. Now parameterised.
- serviceapp/register.php duplicate detection consults the users indexes and
  writes them with the row.

Sweep confirms no join or lookup compares two encrypted columns any more.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

backend/serviceapp/getdriverstotalMonthly.php

@@ -48,7 +48,7 @@ SELECT
     (
         SELECT COUNT(*)
         FROM notesForDriverService n
-        JOIN driver d ON n.phone = d.phone
+        JOIN driver d ON n.phone_key = d.phone_key
         WHERE DATE(n.createdAt) = date_series.date
     ) AS dailyMatchingNotes,
 
@@ -67,7 +67,7 @@ SELECT
     (
         SELECT COUNT(*)
         FROM notesForDriverService n
-        JOIN driver d ON n.phone = d.phone
+        JOIN driver d ON n.phone_key = d.phone_key
         WHERE n.createdAt BETWEEN :start_date3 AND :end_date3
     ) AS totalMonthlyMatchingNotes