Recuperación de cuenta en Next.js (3 flujos + reset), con Turnstile

- lib/recover.ts: requestRecovery(type,email) -> password (crea token en
  home_passwordreset + email), accountname (email con las cuentas), activation
  (reenvía enlace); respuesta genérica anti-enumeración. resetPassword(token,pass)
  re-deriva el verifier SRP6 v2 (bnetMakeRegistration) y actualiza battlenet_accounts,
  marca el token usado.
- Routes /api/auth/recover (Turnstile) y /api/auth/reset-password.
- Páginas app/[locale]/recover (RecoverForm: selector de tipo + email + Turnstile) y
  reset-password (ResetForm con token de la URL). Catálogos Recover, Reset.

Verificado: recover sin captcha -> captchaFailed; reset token inválido -> invalidLink;
páginas 200. Reutiliza home_passwordreset de Django. Crypto de reset ya validada.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/messages/en.json

@@ -81,5 +81,34 @@
     "invalidLink": "The link is invalid or has already been used.",
     "expiredLink": "The link has expired. Please request a new one.",
     "goLogin": "Go to sign in"
+  },
+  "Recover": {
+    "title": "Recover account",
+    "type": "What do you want to recover?",
+    "typePassword": "Password",
+    "typeAccountName": "Account name",
+    "typeActivation": "Activation link",
+    "email": "Gmail email address",
+    "submit": "Request",
+    "sending": "Sending…",
+    "success": "If an account exists with that email, we have sent you the information.",
+    "invalidEmail": "Enter a valid Gmail address.",
+    "genericError": "Something went wrong. Please try again later.",
+    "captchaFailed": "Anti-bot verification failed. Please retry."
+  },
+  "Reset": {
+    "title": "Reset password",
+    "password": "New password",
+    "confPassword": "Confirm password",
+    "submit": "Reset",
+    "saving": "Saving…",
+    "success": "Password reset. You can now sign in.",
+    "goLogin": "Go to sign in",
+    "invalidLink": "The link is invalid or has already been used.",
+    "expiredLink": "The link has expired. Please request a new one.",
+    "passwordMismatch": "Passwords do not match.",
+    "passwordTooLong": "The password must not exceed 16 characters.",
+    "accountNotFound": "Account not found.",
+    "genericError": "Something went wrong. Please try again later."
   }
 }