Every email this site sends leaves through it. Better Auth's magic links and email OTPs — the
only ways in, since password sign-in is off — go through one sendEmail() in
server/utils/email.ts, and so do the email subsystem's drafts, scheduled sends, previews,
and the Maizzle-built welcome and verify templates. The key is resolved
from the vault at boot (process.env, the infrastructure exception), and the from-address
is a tolbert.design mailbox.
Sending is Resend's half; receiving is Cloudflare Email Routing's. The two together are the domain's whole mail story, and neither runs a mailbox.