pendingRecoveryKeyReset

The pending recovery key reset of userId, or null. Read in one atomic step together with the recovery key state: throws IllegalStateException (fail closed) if a stored reset is not bound to the user's current ACTIVE key and epoch, which the transitions never allow.