Builds a query for fetching a verification by encoded token when it is still valid.

Pass value to scope the lookup to a specific identity (the email or phone the verification was issued for). Required for short codes where the token alone isn't enough to bind the lookup to one user; long random tokens can omit it.