Merge feature/Backend-DSC-MFA into feature/merge_update_code

Brings TOTP / Google Authenticator MFA factor (device mapping at
/v1/mfa/totp/setup + /verify, login via existing twofactor pipeline),
DSC-2FA login UI fix, Individual-only filter on guardian/nominee/family
link pickers, Title Case normalization on client names, and migration
0296 unique nominee per account type.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

# Conflicts:
#	.claude/settings.local.json
#	fineract-provider/logs/fineract.log

fineract-provider/dependencies.gradle

@@ -95,6 +95,10 @@ dependencies {
             'com.squareup.okhttp3:okhttp',
             'com.squareup.okhttp3:okhttp-urlconnection',
 
+            // TOTP (Google Authenticator) — secret generation, QR code data URI, code verification.
+            // Bundles ZXing transitively for QR PNG output (used by ZxingPngQrGenerator).
+            'dev.samstevens.totp:totp:1.7.1',
+
             'org.apache.commons:commons-lang3',
             'commons-io:commons-io',
             'org.apache.poi:poi',