Implement RFC 8058 one-click unsubscribe correctly: required headers, HTTPS POST behavior, Gmail and Yahoo sender rules, and common failure modes.