Update account-recovery.yml

[tarekziade]

1. changed the delay to reflect the current reality
2. add a check box to tell the admin if the user has lost the recovery codes as well to avoid one extra round trip

For 2. here's an example of where this applies: #3200

Before the change:

1. User: I lost my 2FA access
2. Admin: I see valid recovery codes in the DB, have you tried them?
3. User: I lost them as well or never downloaded them
4. Admin: ok let me proceed with the reset process

After the change:

1. User: I lost my 2FA access, and the recovery codes as well
2. Admin: yes, I see valid recovery codes in the DB, ok let me proceed with the reset process

Why it matters? Because there can be months between two answers from the admin, so the change will spare those extra months.