Right now we send emails with both envelope and from set to the user account, which can cause all sorts of problems with DKIM and DMARC.

This should be updated to use a proper noreply handling on the envelope, so we can at least get it out for everybody except overly-strict-dmarc, which are a lot fewer, similar to how we handle things like the mailinglist resend functionality.

If possible it might also be a good idea to actualy check the dmarc settings on the email as part of the flow, at least if we can with a short timeout, to be more targeted when telling the user if its likely to work or not.