Break-glass access

Recover access.

A recovery code opens a restricted 15-minute session only long enough to register a replacement passkey.