Recover access without losing context.

CertificateScan uses short-lived recovery links and does not reveal whether an address is registered.

• One-hour recovery links
• Account-enumeration protection
• Other sessions revoked after reset