feat(autofill): Ctrl+Shift+T types the 2FA code

Same workflow as the password-only hotkey: click the 2FA field, press the
combo, the current 6-digit code is typed in.

Reuses the whole autofill pipeline — no new native typing path. The code is
sent in the password slot with an empty username, so Delphi's existing
password-only branch types just the code.

- Bridge: akTotp kind, hotkey id 47, registered/torn down alongside the other
  two autofill combos; an unconfigured combo (vk=0) doesn't count as a
  registration failure.
- Matching filters on totp_secret BEFORE scoring, so the multi-match picker
  never offers an entry that has no code.
- Configurable + synced like the others (autofillHotkeyTotp), collision-checked
  against the other four slots, covered by Reset to defaults and the cheatsheet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

CLAUDE.md

@@ -148,6 +148,12 @@ Retour Delphi → JS via `WebBrowser.ExecuteJavaScript('Bridge.onX(...)')`.
 
 - `Ctrl+Shift+L` : autofill complet (user + Tab + password)
 - `Ctrl+Shift+P` : autofill password seul (forms step-2, unlock screens)
+- `Ctrl+Shift+T` : autofill du **code 2FA** (cliquer le champ 2FA d'abord).
+  ID hotkey 47 / `akTotp`. Ne matche que les entrées avec `totp_secret` (filtre
+  appliqué **avant** le scoring → le picker ne propose jamais un candidat sans
+  TOTP). JS génère le code et l'envoie **dans le slot password avec un username
+  vide** → réutilise le chemin password-only de `ExecuteAutofill`, aucun code
+  natif en plus.
 - `Ctrl+Shift+A` : new entry pré-rempli avec le titre de la fenêtre foreground
 - `Ctrl+Shift+D` : toggle debug panel (uniquement si `config.txt` présent)