{ success: true } - whether the email was newly added,
already on the waitlist, or already belongs to a registered account are
deliberately indistinguishable. This is a public, unauthenticated route, so
the response never reveals which emails already exist in your system.
No confirmation email is sent when someone joins the waitlist - the first
email they’ll receive is the real invitation, sent when you invite them.