feat(club-004): club recovery: recovery codes and device reassignment

work/artifacts/CLUB-004/reviewer.json

@@ -0,0 +1,16 @@
+{
+  "feature_id": "CLUB-004",
+  "agent": "reviewer",
+  "stage": "review_gate",
+  "verdict": "APPROVED",
+  "summary": "Recovery codes implementados correctamente: generación con SHA-256, consumo idempotente en transacción, endpoints REST.",
+  "checks": [
+    { "item": "SHA-256 hash del código, nunca plaintext", "ok": true },
+    { "item": "FOR UPDATE + COMMIT en consumeRecoveryCode", "ok": true },
+    { "item": "TypeScript sin errores", "ok": true },
+    { "item": "Tests club pasan", "ok": true }
+  ],
+  "issues": [],
+  "evidence": ["npm run typecheck", "npm run build", "npx vitest run src/modules/club/tests/"],
+  "timestamp": "2026-08-26T20:48:00Z"
+}