Passkeys for MENA Apps: Build the Recovery Path First

Passkeys remove a common phishing target, but a weak reset flow can undo the security gain. Start with recovery, then add credentials without locking users out.