recovery: update calculation of PTO and loss timeout

This updates how PTO and loss timeout are calculated based on the latest
recovery draft. It also fills in some gaps we had, notably arming PTO
when the peer has not completed address validation to prevent deadlocks
during handshake.