Recovery

Use journals + shiftlock-inspect for timeline, explain, recovery abort-transfer dry-runs, and incident bundles.

Incident bundles must remain sanitized (no resolved secrets).