fix(auth): a new recovery phrase takes the password too

password.setRecoveryKeys took a session and a TOTP code alone, so a phone
signed in with its authenticator beside it could set a phrase of its
holder's own and, through the phrase's reset, a new password, never
knowing the old one. It now takes the old password's SRP proof (from
beginChange, the caller's own) and a TOTP or recovery code, as changing
the password does: one owner proof for both (_proveOwner), forwarded by
members, asked for in the account section's New recovery phrase.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

packages/halkyon_base_client/lib/src/protocol/client.dart

@@ -459,16 +459,25 @@ class EndpointPassword extends _isc.EndpointRef {
   );
 
   /// A new recovery phrase: [recoveryKeys], the caller's keys wrapped under
-  /// it on the device, replace the old wrapping, for a [code] from one of
-  /// their authenticators. Refusals as `setRecoveryKeys`'.
+  /// it on the device, replace the old wrapping, with the password's proof
+  /// for [challenge] ([beginChange]) and a [totpCode] or [recoveryCode], as
+  /// [change] takes. Refusals as `setRecoveryKeys`'.
   _ida.Future<void> setRecoveryKeys({
-    required String code,
+    required _isc.UuidValue challenge,
+    required _idt.ByteData clientValue,
+    required _idt.ByteData clientProof,
+    String? totpCode,
+    String? recoveryCode,
     required _i3so7e0p.WrappedKeys recoveryKeys,
   }) => caller.callServerEndpoint<void>(
     'halkyon_base.password',
     'setRecoveryKeys',
     {
-      'code': code,
+      'challenge': challenge,
+      'clientValue': clientValue,
+      'clientProof': clientProof,
+      'totpCode': totpCode,
+      'recoveryCode': recoveryCode,
       'recoveryKeys': recoveryKeys,
     },
   );