Closes #605
Centralize SMTP transport creation to reduce the duplicated CodeQL SMTP request-forgery path.