Check User Exists

Checks if a user with the given email exists in the database.

Rate Limited: 10 requests per minute per IP address.

Security considerations:

• Rate limiting prevents automated user enumeration attacks
• Consistent response timing mitigates timing-based attacks
• All requests are logged for security monitoring

Does not require authentication - public endpoint for login flow validation.