fix: include emailVerified field in /api/users/me endpoint

The verification banner was reappearing after login/refresh because
the /api/users/me endpoint was not returning the emailVerified field.

This ensures the frontend always has access to the current email
verification status when loading user data.

backend/src/routes/users.js

@@ -14,6 +14,7 @@ router.get('/me', authenticate, async (req, res, next) => {
         id: true,
         username: true,
         email: true,
+        emailVerified: true,
         avatar: true,
         createdAt: true,
         updatedAt: true,