feat(daemon): wire TotpStore into AppState behind feature gate

common/src/types.rs

@@ -72,6 +72,15 @@ pub struct RecoveryCodeSummary {
     pub expires_unix: u64,
 }
 
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, zvariant::Type)]
+pub struct TotpEnrollment {
+    pub user: String,
+    /// Base32-encoded shared secret, no padding. ~32 chars for 160 bits.
+    pub secret_b32: String,
+    /// Full `otpauth://totp/...` URI suitable for QR encoding.
+    pub otpauth_uri: String,
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;