Fix navstates

The navigation_state RCRECOVER was not present in the switch which caused the offboard flag to stay after the mode was deactivated.

The rest is just reordering of the states to match the enum.

Tested in HIL, review and merge please.
I would argue that altitude is controlled in this mode, as descend mode depends on local altitude being correct when triggered, and open-loop land mode is kicked off based on an altitude threshold.