Add support for secondary email addresses

We should allow users to set and confirm a secondary email address—potentially more than one.

This could serve as a fallback in case they lose access to their primary inbox. In such cases, we could use the secondary address on file to verify account ownership. This feature would enhance account recovery options and help reduce support overhead.