Recovery

Restore admin access safely.

The mock FE1 flow simulates recovery without backend email infrastructure, while still matching the real app's route structure and validation contract.