Replace passkey recovery codes

Request

• Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
• URL: /user/passkeys/recovery-codes
• Auth: HTTP bearer