Submits code against the active challenge.
No-ops when there is no challenge or one is already being checked, so a double tap on "Verify" cannot consume two attempts against a rate-limited endpoint.