chore(auth): drop the unused recovery-code schema export

public/sw.js

@@ -36,7 +36,7 @@ try {
 // v1.4.38.4 → v1.4.42. Do not hand-edit; bump `package.json` and rebuild.
 const CACHE_VERSION =
   (typeof self !== "undefined" && self.__APP_VERSION__) ||
-  /* @sw-version-fallback */ "v1.22.0";
+  /* @sw-version-fallback */ "v1.22.1";
 const STATIC_CACHE = `healthlog-static-${CACHE_VERSION}`;
 const PAGE_CACHE = `healthlog-pages-${CACHE_VERSION}`;
 // v1.18.6 — read-only data cache for a curated allowlist of safe GET `/api/*`

src/lib/validations/mfa.ts

@@ -11,12 +11,6 @@ export const totpCodeSchema = z
   .trim()
   .regex(/^\d{6}$/, "Enter the 6-digit code from your authenticator app");
 
-/**
- * A recovery code as displayed (`XXXXX-XXXXX`) — accepted case-insensitively
- * with or without the separator; the server normalises before comparing.
- */
-export const recoveryCodeSchema = z.string().trim().min(8).max(32);
-
 export const totpConfirmSchema = z.object({
   code: totpCodeSchema,
 });