v3.4.148

Fix resend rate-limit token wasted on issue_otp_for_recipient_group() failure: a group-lock timeout or transient DB write failure during a resend no longer counts against the customer's 3/hour resend quota (email was never actually sent). Previously this could hard-lock a legitimate customer out for an hour with zero codes delivered.