Checks whether a VMS user exists for the given email, for the TotalityLMS -> VMS SSO handoff. HMAC-authenticated (X-Sso-Timestamp / X-Sso-Signature headers); returns {exists:false} rather than 404 for unknown users to avoid user enumeration.