add fxa-verifiedEmail to api.md

it was missing in the `/certificate/sign` documentation