code (required); optional verified_by records who verified. Succeeds only when the code is unused, not disabled, not expired, and the project is enabled. Response success=true means success; when success=false, check error_code and message (e.g. CODE_ALREADY_USED, CODE_EXPIRED).