feat(autofill): Ctrl+Shift+T types the 2FA code

Same workflow as the password-only hotkey: click the 2FA field, press the
combo, the current 6-digit code is typed in.

Reuses the whole autofill pipeline — no new native typing path. The code is
sent in the password slot with an empty username, so Delphi's existing
password-only branch types just the code.

- Bridge: akTotp kind, hotkey id 47, registered/torn down alongside the other
  two autofill combos; an unconfigured combo (vk=0) doesn't count as a
  registration failure.
- Matching filters on totp_secret BEFORE scoring, so the multi-match picker
  never offers an entry that has no code.
- Configurable + synced like the others (autofillHotkeyTotp), collision-checked
  against the other four slots, covered by Reset to defaults and the cheatsheet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

delphi-backend/UMainForm.pas

@@ -895,10 +895,14 @@ begin
       var LFullVk   := Word(StrToIntDef(GetParam('full_vk'),   Ord('L')));
       var LPwdMods  := Word(StrToIntDef(GetParam('pwd_mods'),  6));
       var LPwdVk    := Word(StrToIntDef(GetParam('pwd_vk'),    Ord('P')));
+      // 2FA combo — vk 0 when the user cleared it, which skips registration.
+      var LTotpMods := Word(StrToIntDef(GetParam('totp_mods'), 6));
+      var LTotpVk   := Word(StrToIntDef(GetParam('totp_vk'),   Ord('T')));
       var LAllOk    := FBridge.SetAutofillHotkeys(LFullMods, LFullVk,
-                                                  LPwdMods,  LPwdVk);
-      LogLine(Format('Autofill hotkeys set — full=mods:%d vk:%d  pwd=mods:%d vk:%d  (all_ok=%s)',
-        [LFullMods, LFullVk, LPwdMods, LPwdVk, BoolToStr(LAllOk, True)]));
+                                                  LPwdMods,  LPwdVk,
+                                                  LTotpMods, LTotpVk);
+      LogLine(Format('Autofill hotkeys set — full=mods:%d vk:%d  pwd=mods:%d vk:%d  totp=mods:%d vk:%d  (all_ok=%s)',
+        [LFullMods, LFullVk, LPwdMods, LPwdVk, LTotpMods, LTotpVk, BoolToStr(LAllOk, True)]));
       // Notify JS of the result so the UI can flag a failed-to-register combo
       // (typically a clash with another app's global hotkey).
       WebBrowser.ExecuteJavaScript(
@@ -1542,7 +1546,11 @@ begin
   LTitle := LTitle.Replace('\', '\\');
   LTitle := LTitle.Replace('"', '\"');
 
-  if AKind = akPasswordOnly then LKind := 'password' else LKind := 'full';
+  case AKind of
+    akPasswordOnly: LKind := 'password';
+    akTotp:         LKind := 'totp';
+  else              LKind := 'full';
+  end;
 
   WebBrowser.ExecuteJavaScript(
     'if(window.Bridge&&typeof Bridge.onAutofillRequest==="function")' +