Clarify owner recovery JSON key replacement
Clarify SQL fallback needs the JSON wrapper, not the bare key
Add SQL-rotate fallback step to Owner Recovery guide
Add Owner Recovery guide covering the automatic-recovery lockout bug and safe reclaim workflow