fix: place user reset after new email logic (#16786)

warehouse/admin/views/users.py

@@ -572,7 +572,6 @@ def user_recover_account_complete(user: User, request):
     user.totp_secret = None
     user.webauthn = []
     user.recovery_codes = []
-    _user_reset_password(user, request)
 
     for account_recovery in user.active_account_recoveries:
         account_recovery.additional["status"] = "completed"
@@ -585,6 +584,8 @@ def user_recover_account_complete(user: User, request):
                     email.primary = True
                     email.verified = True
 
+    _user_reset_password(user, request)
+
     request.session.flash(
         (
             "Account Recovery Complete, "