fix(auth): Add missing security event name to db

Because:
 - The `account.recovery_codes_set` event name is not in the db
 - And that causes the recording of the event to fail

This Commit:
 - Adds the missing event name to the db
 - Fixes type issue so these are caught sooner

Closes: FXA-13351

Author: nshirley

packages/db-migrations/databases/fxa/patches/patch-186-187.sql

@@ -0,0 +1,7 @@
+SET NAMES utf8mb4 COLLATE utf8mb4_bin;
+
+CALL assertPatchLevel('186');
+
+INSERT INTO securityEventNames(name) VALUES ('account.recovery_codes_set');
+
+UPDATE dbMetadata SET value = '187' WHERE name = 'schema-patch-level';

packages/db-migrations/databases/fxa/patches/patch-187-186.sql

@@ -0,0 +1,5 @@
+-- SET NAMES utf8mb4 COLLATE utf8mb4_bin;
+
+-- DELETE FROM securityEventNames WHERE name = 'account.recovery_codes_set';
+
+-- UPDATE dbMetadata SET value = '186' WHERE name = 'schema-patch-level';

packages/db-migrations/databases/fxa/target-patch.json

@@ -1,3 +1,3 @@
 {
-  "level": 186
+  "level": 187
 }

packages/fxa-shared/db/models/auth/security-event.ts

@@ -11,7 +11,7 @@ import { convertError } from '../../mysql';
 // These are the values of the `securityEventNames` table in the fxa DB.  The
 // numeric id is a MySQL auto_increment'd value.  It's best to run the
 // migrations and then add the id values here when adding more event types.
-export const EVENT_NAMES: Record<string, number> = {
+export const EVENT_NAMES = {
   'account.create': 1,
   'account.login': 2,
   'account.reset': 3,
@@ -76,7 +76,8 @@ export const EVENT_NAMES: Record<string, number> = {
   'account.passwordless_login_otp_failed': 57,
   'account.passwordless_login_otp_verified': 58,
   'account.passwordless_registration_complete': 59,
-} as const;
+  'account.recovery_codes_set': 60,
+} as const satisfies Record<string, number>;
 
 export type SecurityEventNames = keyof typeof EVENT_NAMES;