engine api: pass checkpoint vclock explicitly to engine

This makes the engines less dependent on the global recovery
object (eventually this dependency will be removed altogether).