- Also hard-set TOTP algorithm with comment from testing others.
- Includes DB storage and code validation. - Extracted TOTP work to its own service file. - Still needs testing to cover this side of things.