Recover access

The token storage and verification architecture is installed. Email delivery is intentionally adapter-based; configure a provider before production.