[Account deletion] Account scheduled for removal cannot verify email but can reset password

ux/minor

## Background:
- Device / Browser (OS version): Chrome on win 10
- Build: Version Tag: 2022-02-08.0
- Reported by: Jasonns

## Description:
Users scheduled for removal (i.e. currently deactivated) can reset passwords though they cannot verify email.

## Steps to reproduce:
1. In user portal, Log in to a scheduled-for-removal account by email which email addr is unverified
2. Enter the email verification code and enter the correct password
3. See the "your account has been deactivated" message, and check in the Authgear admin portal that the account email remains unverified
4. Login again in user portal , asked for verification code again
4. Click forget-password email and follow the steps in email for resetting the password
5. See the password has been successfully reset

N.B: By the following steps, the email addr can be verified, please check if this is expected
1. Log in to normal account in user portal
2. Ask to verify email
3. Don't enter verification code yet.
4. Open a new Tab, Start the scheduled deletion
5. Go back to Enter verification code, but see account deactivated
6. See email verified in admin portal

## Expected result:
Should stop verifying email addr for account scheduled for removal and should not allow deactivated users to reset their passwords.

## Screenshot:

https://user-images.githubusercontent.com/4337525/154911079-5de53dfd-39ff-493d-9fad-f1b9dd5d532d.mp4

Start by reproducing the user portal flows for email verification and forgot-password on an account scheduled for removal, then compare the resulting state in the Authgear admin portal. Done means deactivated users cannot verify email or reset passwords, while the described account-deletion behavior is covered by tests.

Written by the indexing model from the issue text.