fix(auth): fix verifyOTP parameter validation for OtpType.recovery with tokenHash

[grdsdev]

Description

Fixes #1159

The verifyOTP method was incorrectly requiring email or phone parameters when using OtpType.recovery with tokenHash. According to the backend API, when using recovery type with tokenHash, only token_hash and type should be provided.

Changes

• Updated verifyOTP method to handle OtpType.recovery with tokenHash correctly
• Added validation to ensure email/phone are not provided when using recovery type with tokenHash
• Updated request body construction to exclude email/phone for recovery type with tokenHash
• Added test cases to verify the fix works correctly

Testing

• Added test case for recovery type with tokenHash (no email/phone)
• Added test case to ensure recovery type with tokenHash rejects email/phone parameters

Related Issue

Closes #1159

[coveralls]

Pull Request Test Coverage Report for Build 20715880402

Details

• 6 of 6 (100.0%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.01%) to 79.962%

---

Totals
Change from base Build 20572079940:	0.01%
Covered Lines:	3364
Relevant Lines:	4207

---

💛 - Coveralls