67fd1ee

feat(updater): usable emergency recovery - rescue.php no longer mints a recovery key for anonymous visitors (security hole + dead-end UX), instead it explains where the key comes from and sorts jobs by mtime; new authenticated POST /api/v1/core/updates/recovery-key rotates and returns the key exactly once; admin-updates page gains an 'Emergency recovery' section with a show/rotate button that copies the key to the clipboard; installer generates the key at finalize and displays it once on the success screen (all 7 locales); maintenance screens now point to both the admin-updates page and rescue.php with a hint on where to find the key

2026-08-05T10:59:57+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>