Account recovery
Implement the account recovery workflow.
This issue is just for tracking: the workflow needs to be part of float if it requires integration with the SSO server, otherwise it can be delegated to the account management UI. The decision depends on whether we prefer to isolate services based on access (to the user database), or credentials (unauthenticated UI in the SSO server, authenticated on the account manager), etc.