How to handle signed CLA not verified by user

When user sign CLA but not verify it by link from email, then this CLA stay in system and there is no way to remove it.
Now there are 175 CLAs in this state in production DB.
There seems to be two systematic solutions.

Solution 1:
Not verified CLAs should timeout and be automatically removed from system after defined time (eg. 30 days?).
Maybe verification emails may be resend to these users after some period (eg. 5 days).
But be careful about historical cases now in DB not to delete something shouldn't be deleted.

Solution 2:
Create GUI functionality for 'Project Lead' or 'Community lead' to resolve this situation manually - three manual actions available:

• resend verification email,
• validate application (so goes to next approval step)
• reject application (so is deleted from DB)