Recover access to a new passkey

Customers regain access after losing a device. A 72-hour window lets the real owner cancel, and the platform covers network fees.