Verify an OTP against the live database.
Secured lookup · rate limited · credentials not in public files