gplay recovery (incident response for a bad release)

gplay recovery force-updates the users stuck on a bad versionCode to a safe version. Shared conventions are in gplay-cli-usage. The whole namespace is [experimental].

A recovery is keyed by package + versionCode, lives outside the Edit model (no editId), and follows a draft → active → canceled lifecycle.

The lifecycle, in order

# 1. Stage a DRAFT (harmless, nothing is pushed yet, so no --confirm):
gplay recovery create --version-code 431 --all-users
gplay recovery create --version-code 431 --regions US,FR      # or scope it
gplay recovery create --version-code 431 --sdk-levels 30,31

# 2. Inspect the recoveries on that versionCode (find the appRecoveryId):
gplay recovery list --version-code 431