rotateLastDeviceRecoveryKey
abstract suspend fun rotateLastDeviceRecoveryKey(authorization: RecoveryKeyRotationAuthorization, signer: ServerRequestSigner)
Submits a recovery key rotation (docs/recovery-key-lifecycle.md): PUT /v1/devices/{user}/{device}/last-device-recovery/key/rotation for the statement's authorizing device, signed with that device's registered device authentication key. The body carries the current recovery key's signature and the new key's proof of possession. Returns once the server rotated the key, or recognized a retry of the rotation that did. Throws SecureMessageTransportException.RecoveryKeyRotationRejected or SecureMessageTransportException.AuthenticationFailed.