Add TOTP two-factor authentication with recovery codes

Author: ddrayko

config/migrate.js

@@ -27,6 +27,9 @@ const tables = {
       { name: 'email_change_expires', def: 'DATETIME DEFAULT NULL' },
       { name: 'user_agent', def: 'VARCHAR(512) DEFAULT NULL' },
       { name: 'onboarding_done', def: 'TINYINT(1) NOT NULL DEFAULT 0' },
+      { name: 'totp_secret', def: 'VARCHAR(255) DEFAULT NULL' },
+      { name: 'totp_enabled', def: 'TINYINT(1) NOT NULL DEFAULT 0' },
+      { name: 'recovery_codes', def: 'TEXT DEFAULT NULL' },
       { name: 'created_at', def: 'TIMESTAMP DEFAULT CURRENT_TIMESTAMP' },
     ],
   },