Controllable Inversion of Black-Box Face Recognition Models via Diffusion