chore(deploy): add custody recovery drill target [skip ci]

Makefile

@@ -14,7 +14,7 @@ JS_FILES += ${IHP}/static/vendor/turbolinksInstantClick.js
 JS_FILES += ${IHP}/static/vendor/turbolinksMorphdom.js
 
 .DEFAULT_GOAL := help
-BOOTSTRAP_GOALS := help install install-nix doctor ui
+BOOTSTRAP_GOALS := help install install-nix doctor ui recovery-drill
 
 ifneq ($(strip $(IHP)),)
 include ${IHP}/Makefile.dist
@@ -23,13 +23,14 @@ else ifneq ($(filter-out $(BOOTSTRAP_GOALS),$(MAKECMDGOALS)),)
 $(error IHP is not set. Run `make` to list setup targets, `make install` to prepare local tooling, or enter `devenv shell` before using IHP make targets)
 endif
 
-.PHONY: help install install-nix doctor ui
+.PHONY: help install install-nix doctor ui recovery-drill
 help:
 	@printf '%s\n' 'inter-hub targets:'
 	@printf '  %-17s %s\n' 'make install' 'Prepare local tooling; installs devenv when Nix is available.'
 	@printf '  %-17s %s\n' 'make install-nix' 'Show the Nix installer command required before make install.'
 	@printf '  %-17s %s\n' 'make doctor' 'Check whether devenv, nix, and direnv are visible.'
 	@printf '  %-17s %s\n' 'make ui' 'Start the local Inter-Hub UI at http://localhost:8000.'
+	@printf '  %-17s %s\n' 'make recovery-drill' 'Verify custody-backed SOPS recovery for the runtime Secret.'
 	@printf '%s\n' ''
 	@printf '%s\n' 'IHP targets are also available after entering the dev environment with devenv shell.'
 
@@ -95,6 +96,9 @@ doctor:
 	@if [ -x /nix/var/nix/profiles/default/bin/nix ]; then echo "nix default profile: /nix/var/nix/profiles/default/bin/nix"; fi
 	@if [ -x /nix/var/nix/profiles/default/bin/devenv ]; then echo "devenv default profile: /nix/var/nix/profiles/default/bin/devenv"; fi
 
+recovery-drill:
+	@deploy/railiance/recovery-drill.sh
+
 ui:
 	@echo "Starting inter-hub UI at http://localhost:8000"
 	@if [ -d /nix/var/nix/daemon-socket ] && [ ! -x /nix/var/nix/daemon-socket ]; then \