Backfill approved legacy users with verified emails and replace the old unverified-email warning setting with a single approval email policy.