CVE-2026-86552: SmartLife registration without email ownership verification

The SmartLife app dynamically generates new application authentication parameters at runtime. With acquired SmartLife application authentication credentials, an attacker can use the backend interface `/account/person/signup.serv` to register with any arbitrary email address because email ownership is not verified before registration.