Facebook Signup APIs Need Inbox Isolation

Facebook signup tests can look green when they accidentally read old messages from a shared inbox.

The fix is to treat the inbox as part of the API contract by attaching a run ID to each POST /signup request.

Persist that ID through the backend and accept only verification emails that match the current run.

This inbox isolation reduces false positives and makes Facebook-based auth debugging much faster.