feat: add email status check to verify page

Security Enhancement:
- Server-side validation of email status before allowing verification
- Only allow verifying emails in VerificationPending state
- Show "Action not possible" message for invalid states
- Extract and validate share-id on server side
- Return 404 for invalid share-ids or missing tenant emails

Implementation:
- Convert page.tsx to async server component
- Fetch location and check tenantEmailStatus
- Pass isPending prop to client component
- Add bilingual "not-allowed" translations (same as unsubscribe page)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

web-app/messages/hr.json

@@ -452,6 +452,10 @@
     "error": {
       "title": "Potvrda Nije Uspjela",
       "unknown": "Došlo je do greške prilikom potvrde. Molimo pokušajte ponovno ili kontaktirajte vašeg vlasnika nekretnine."
+    },
+    "not-allowed": {
+      "title": "Akcija nije moguća",
+      "message": "Odabrana akcija nije moguća ili zadani podaci nisu ispravni."
     }
   },
   "email-unsubscribe-page": {