docs(changeset): broaden summary beyond sign-in

The logging covers all OTP verification endpoints (email verification and
password reset as well as sign-in), so "sign-in code" understated the
scope. Use "one-time code" (Copilot review).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aspiers

.changeset/log-otp-verification-failures.md

@@ -2,7 +2,7 @@
 'ePDS': patch
 ---
 
-Failed sign-in code attempts now appear in the server logs, split by reason and tagged with the account's email.
+Failed one-time code attempts now appear in the server logs, split by reason and tagged with the account's email.
 
 **Affects:** Operators