refac: register only open while no verified acc exists, enforced by a use case rather than handler & sends verification email whose link uses the conf pub URL whose code expires after 2h

test/runtime_settings_injection_http_test.go

@@ -40,7 +40,7 @@ func newSecureCookieAuthRouter(t *testing.T, isProduction bool) (*chi.Mux, *mock
 		token,
 		useCases.NewGetUserUseCase(userRepo),
 		useCases.NewListUsersUseCase(userRepo),
-		useCases.NewCreateUserUseCase(userRepo, hasher),
+		useCases.NewCreateUserUseCase(userRepo, hasher, newMockMailRepo(), "https://cms.example.com"),
 		useCases.NewAuthenticateUserUseCase(userRepo, hasher),
 		isProduction,
 	)
@@ -140,7 +140,7 @@ func newRuntimeSettingsContainer(t *testing.T) *api.UseCases {
 		UpdateArticleUseCase:    useCases.NewUpdateArticleUseCase(articleRepo),
 		DeleteArticleUseCase:    useCases.NewDeleteArticleUseCase(articleRepo, imageRepo),
 		GetUserUseCase:          useCases.NewGetUserUseCase(userRepo),
-		CreateUserUseCase:       useCases.NewCreateUserUseCase(userRepo, hasher),
+		CreateUserUseCase:       useCases.NewCreateUserUseCase(userRepo, hasher, mailRepo, "https://cms.example.com"),
 		UpdateUserUseCase:       useCases.NewUpdateUserUseCase(userRepo, hasher),
 		AuthenticateUserUseCase: useCases.NewAuthenticateUserUseCase(userRepo, hasher),
 		DeleteUserUseCase:       useCases.NewDeleteUserUseCase(userRepo),