Contact IT if activation or recovery fails

Production should route users to a verified support path, such as an IT ticket flow or manager-assisted recovery.

Activation support

Do not expose whether arbitrary email addresses exist. Support should validate the employee record, manager, and invite status before issuing a new activation route.