Identity sharing controls for form submissions
Signed-in responders can now explicitly choose whether to share verified account identity with form owners.
Verified identity capture is now consent-based. Responders can opt in per submission using a dedicated checkbox.
When enabled, form owners see verified identity separately from optional user-provided contact email.
This keeps trust signals clear without forcing account identity disclosure by default.