NPE in BridgeWrapper.recover

Where a BridgeWrapper represents a subordinate XTS tx driven by a parent of a type e.g. JTA whose recovery module may run before XTS is initialized, there is the possibility that recovery will be driven whilst no XTS recovery manager is yet available. In such cases recover should return null rather than throwing NPE.