Build resilient WebAuthn passkey recovery in Node.js with cryptographic backup codes and secure fallback flows that preserve zero-trust security.