Key recovery and social recovery options

[aaronparsons-dev]

Single-key architecture means key loss is permanent. Document recommended patterns for application-layer key recovery without violating the non-transferable identity invariant.