feat: add recovery codes to user repository (#11702)

# Which Problems Are Solved

Adds a repository implementation to add/remove recovery codes to the
users relational table.

# How the Problems Are Solved

This is achieved by:
* adding the following columns to the users table: `recovery_codes`,
`recovery_code_last_successful_check`, `recovery_code_failed_attempts`
* adding the `RecoveryCodes` field to the `HumanUser` domain with fields
to set recovery `codes`, `lastSuccessfullyCheckedAt` timestamp, and
`failedAttempts`
* setting `recoveryCodes` in the `Get` user query statement to return a
json object with details related to the recovery codes
* adding the repository-layer implementation to add/remove recovery
codes and set fields related to recovery code checks.
* adding projection reducers to handle the following events:
`HumanRecoveryCodesAddedEvent`, `HumanRecoveryCodesRemovedEvent`,
`HumanRecoveryCodeCheckSucceededEvent`, and
`HumanRecoveryCodeCheckFailedEvent`
* adding unit tests

# Additional Changes
* fix the error message when the recovery is empty in
`internal/command/user_human_recovery_codes.go`
* add a new error message for empty recovery code during checks in
`en.yaml`

# Additional Context
- Closes https://github.com/zitadel/zitadel/issues/11212
- Follow-up: integration tests for the reducers will be added in a
different PR after this
[PR](https://github.com/zitadel/zitadel/pull/11478) is merged

backend/v3/storage/database/dialect/postgres/migration/013_user_table/up.sql

@@ -70,6 +70,10 @@ CREATE TABLE zitadel.users(
     , invite_accepted_at                    TIMESTAMPTZ CHECK ((type = 'machine' AND invite_accepted_at IS NULL)                    OR (type = 'human'))
     , invite_failed_attempts                SMALLINT    CHECK ((type = 'machine' AND invite_failed_attempts IS NULL)                OR (type = 'human'))
 
+    , recovery_codes                        TEXT[]      CHECK ((type = 'machine' AND recovery_codes IS NULL)                        OR (type = 'human'))
+    , recovery_code_last_successful_check   TIMESTAMPTZ CHECK ((type = 'machine' AND recovery_code_last_successful_check IS NULL)   OR (type = 'human'))
+    , recovery_code_failed_attempts         SMALLINT    CHECK ((type = 'machine' AND recovery_code_failed_attempts IS NULL)         OR (type = 'human'))
+
     -- foreign keys for verifications are created in the verification migration
 
     -- machine