Add guarded skip path for initial Recovery Key confirmation

[Copilot]

The initial Recovery Key prompt blocked users from proceeding until they completed confirmation. This updates the onboarding flow to allow deferral from the Home modal while making the risk explicit and preventing skipped flows from being treated as backed up.

• Home modal

  • Adds a Skip action directly to the initial Recovery Key modal
  • Shows explicit risk copy in the modal body
  • Requires a checkbox acknowledgement before enabling Skip

• Recovery Key flow

  • Adds a skip path from ViewRecoveryKeyScreen back to Home
  • Keeps the existing confirm path unchanged

• Backup state integrity

  • Skip remains navigation-only
  • No backup-confirmation actions are dispatched on skip
  • No recovery-key-backed-up state is written unless the user completes confirmation

• UI plumbing

  • Extends KeeperModal so the secondary action can be disabled, which is used to gate Skip behind acknowledgement

• Specs / coverage

  • Archives the OpenSpec change and adds focused screen tests for:
    • enabling skip only after acknowledgement
    • returning to Home when skipping from the Recovery Key screen

<KeeperModal
  buttonText={common.continue}
  secondaryButtonText={common.skip}
  secondaryDisable={!acceptedBackupRisk}
  secondaryCallback={closeBackupModal}
  Content={BackupModalContent}
/>

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• blackie.c3-soft.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/bitcoin-keeper/bitcoin-keeper/node_modules/.bin/jest --watchAll=false -o node�� eryKeyScreen.tes-iname e sx . Non-native verfind 14.1/deps/openss/home/REDACTED/work/bitcoin-keeper/bitcoin-keeper ode_modules/node-type 14.1/deps/openssf -DUS�� eryKeyScreen.tes-iname git 14.1/deps/zlib le.encode('utf-8find 14.1/deps/v8/inc. tnet/tools/make che/node-gyp/24.f (dns block)
• invalid.host
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/bitcoin-keeper/bitcoin-keeper/node_modules/.bin/jest --watchAll=false -o node�� eryKeyScreen.tes-iname e sx . Non-native verfind 14.1/deps/openss/home/REDACTED/work/bitcoin-keeper/bitcoin-keeper ode_modules/node-type 14.1/deps/openssf -DUS�� eryKeyScreen.tes-iname git 14.1/deps/zlib le.encode('utf-8find 14.1/deps/v8/inc. tnet/tools/make che/node-gyp/24.f (dns block)
• mempool.space
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/bitcoin-keeper/bitcoin-keeper/node_modules/.bin/jest --watchAll=false -o node�� eryKeyScreen.tes-iname e sx . Non-native verfind 14.1/deps/openss/home/REDACTED/work/bitcoin-keeper/bitcoin-keeper ode_modules/node-type 14.1/deps/openssf -DUS�� eryKeyScreen.tes-iname git 14.1/deps/zlib le.encode('utf-8find 14.1/deps/v8/inc. tnet/tools/make che/node-gyp/24.f (dns block)
• static.realm.io
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/bitcoin-keeper/bitcoin-keeper/node_modules/.bin/prebuild-install --runtime napi ode_�� ')); (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)