recoverEmail handler passes action code into the wrong parameter

Looks like the recoverEmail path in email-handler.html is passing the action code into the wrong parameter.

handleRecoverEmail is defined as:

function handleRecoverEmail(auth, actionCode, lang) {

But the switch calls it like this:

handleRecoverEmail(actionCode);

Inside the handler, checkActionCode(Auth, actionCode) and applyActionCode(Auth, actionCode) use the second parameter, so actionCode ends up being undefined for recover email links.

How to reproduce:

1. Open an email recovery link that uses /email-handler?mode=recoverEmail&oobCode=<valid code>.
2. The handler enters the recoverEmail branch.
3. handleRecoverEmail receives only one argument.
4. Firebase receives undefined as the action code, so the email recovery flow fails instead of reverting the email.

Impact is limited, but this does affect account recovery. If a user's email was changed accidentally or maliciously, the recovery link may not work through Monkeytype's handler. I do not think this is account takeover by itself.

A fix would be to either call handleRecoverEmail(Auth, actionCode, lang) or simplify the function signature so the action code is the first argument.

Read email-handler.html, starting at the recoverEmail switch branch and the handleRecoverEmail entry point. Trace the arguments through checkActionCode and applyActionCode, then verify a valid email-recovery URL completes the revert-email flow without an undefined action code.