fix: release HeroSMS order before content recovery

[superxiaopi]

Summary

• Treat content-script no-response errors as auth-page unreachable recovery cases.
• Refresh latest phone activation state before cancelling/releasing orders so stale state does not skip HeroSMS release.
• Add regression coverage for releasing the old HeroSMS order before reacquiring and completing recovery.

Testing

• node --test tests/phone-verification-flow.test.js