recoverLastDevice
Submits a last-device recovery (docs/last-device-recovery.md): PUT /v1/devices/{user}/{device}/last-device-recovery for the statement's target. Not signed with a ServerRequestSigner: the authorization carries the recovery key's signature and the replacement key's proof of possession. Returns once the server replaced the key, or recognized a retry of the recovery that did. Throws SecureMessageTransportException.LastDeviceRecoveryRejected.