Verify the code a recipient submitted against the active OTP for their phone number. Returns verification: true on a match, otherwise false.

A wrong code is a normal false result with HTTP 200 — not an error. Errors (e.g. too many failed attempts) are returned via the standard error envelope.

Authentication: stream token in the Authorization header (see Authentication in the API Overview).