Guardian confirmationConsent
Unknown applications get the same copy
sendGuardianConsent always returns the generic parent-email message. It does not leak whether an application exists.
GUARDIAN_GENERIC_MESSAGE is If that application is on Kumir, we emailed the parent or guardian a confirmation link. Missing guardian email still returns that copy.
Playwright/test may reveal guardianToken. Production does not.