Add a recovery restore flow that lets eligible users recover their app setup from a snapshot captured before a destructive reload. The restore process brings back the affected app configuration and related saved state, while keeping current menu organization where possible.
Acceptance Criteria:
- Eligible users can restore an available recovery snapshot.
- Restore is limited by subscription plan.
- Restored app data refreshes after completion.
- Used snapshots are marked as restored.
- External source content is not recreated.
- Current menu groups are preserved where possible during restore.