fix(verifications): wrap list response in {items: [...]}

GET /api/admin/verifications returned a bare JSON array, but every
consumer (Verification Management, Approval Management, and the e2e
test's own mock) expects {items: [...]}. Array.isArray(payload?.items)
was always false against a bare array, so both admin screens have been
showing "No verification requests found" regardless of what's actually
in the queue.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/users/src/handlers/verifications.rs

@@ -103,7 +103,11 @@ async fn list_verifications(
     )
     .await
     {
-        Ok(items) => (StatusCode::OK, Json(items)).into_response(),
+        Ok(items) => (
+            StatusCode::OK,
+            Json(serde_json::json!({ "items": items, "page": page, "limit": limit })),
+        )
+            .into_response(),
         Err(e) => (StatusCode::INTERNAL_SERVER_ERROR, e.to_string()).into_response(),
     }
 }