fn rtdl_recovery_final_text() -> String
User-facing message when RTDL recovery gives up — never leaks the internal error.