Emergency SUPER_ADMIN recovery resets authenticator MFA to mandatory email MFA and invalidates all sessions.