Verify Public Share Link Password

Verifies a password-protected share link's password using a timing-safe comparison against the stored scrypt hash, and returns the full snapshot on success. No user session is required, but the request must carry an API key or originate from a whitelisted first-party origin, same as the read endpoint. **Rate limited to 3 attempts per 5 minutes per IP** — considerably tighter than the rest of the API, to make these links impractical to brute-force.

curl -X POST "https://example.com/api/v1/shares/public/string/string/verify" \  -H "Content-Type: application/json" \  -d '{    "password": "string"  }'

{  "success": true,  "message": "string",  "data": {    "passwordRequired": true,    "resumeTitle": "string",    "documentTitle": "string",    "expiresAt": "2019-08-24T14:15:22Z",    "snapshot": {}  }}