Stores a recovery code's digest, account reference and usage timestamp.
used_at is nil until redemption. Ithibati.Identity.RecoveryCodes checks and marks the code
in the same write so concurrent callers cannot both redeem it. Plaintext codes are not stored.