Why: The Dev composite must carry the exact backend (467718a) and frontend (9fc7da2) commits implementing the login recovery contract. Evidence: component branches pushed to their origins; make test runs in this task worktree validate the composite (receipts in task card). Impact: gitlink bump only; no other Dev tree changes. Refs: docs/svc-deploy/2026-10-13-login-recovery-contract.md
ui
@ 0da2e3acd6