fix(auth): a new recovery phrase takes the password too

password.setRecoveryKeys took a session and a TOTP code alone, so a phone
signed in with its authenticator beside it could set a phrase of its
holder's own and, through the phrase's reset, a new password, never
knowing the old one. It now takes the old password's SRP proof (from
beginChange, the caller's own) and a TOTP or recovery code, as changing
the password does: one owner proof for both (_proveOwner), forwarded by
members, asked for in the account section's New recovery phrase.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

packages/halkyon_base_server/test/integration/test_tools/serverpod_test_tools.dart

@@ -1065,7 +1065,11 @@ class _PasswordEndpoint {
 
   _ida.Future<void> setRecoveryKeys(
     _ist.TestSessionBuilder sessionBuilder, {
-    required String code,
+    required _is.UuidValue challenge,
+    required _idt.ByteData clientValue,
+    required _idt.ByteData clientProof,
+    String? totpCode,
+    String? recoveryCode,
     required _iji0wmu8.WrappedKeys recoveryKeys,
   }) async {
     return _ist.callAwaitableFunctionAndHandleExceptions(() async {
@@ -1080,7 +1084,11 @@ class _PasswordEndpoint {
           endpointPath: 'password',
           methodName: 'setRecoveryKeys',
           parameters: _ist.testObjectToJson({
-            'code': code,
+            'challenge': challenge,
+            'clientValue': clientValue,
+            'clientProof': clientProof,
+            'totpCode': totpCode,
+            'recoveryCode': recoveryCode,
             'recoveryKeys': recoveryKeys,
           }),
           serializationManager: _serializationManager,