STEP_050M07P29E14_R01_VM103_MAGIC_API expose exact POST magic-link recovery/resend routes on access vhost for P29E A18; preserve billing/referral/YooKassa and existing public/private boundaries; no payment/provider/schema mutation