Public endpoint backing the token-bound email-preferences page. Sets the recipient's subscription state for one topic. The HMAC-signed token (shared with the unsubscribe endpoint) supplies account/workspace/user; the change is attributed to the user in the audit log. No login required.