Claus Lohmar 76a4a6950c feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) ... - webauthn: the passkey ceremony service (a fake in tests) - totp: the TOTP authenticator; the secret is AEAD-sealed at rest (A9) - sealer: the AEAD TOTP sealer - identities/sessions/credentials: the GUID state machine - flow: the enroll/login screens + the passkey nudge (pre-session double-submit CSRF — A15), rendered inside the shell		2026-10-14 10:53:53 +00:00
..
flow.go	feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006)	2026-10-14 10:53:53 +00:00
render.go	feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006)	2026-10-14 10:53:53 +00:00