Brings TOTP / Google Authenticator MFA factor (device mapping at /v1/mfa/totp/setup + /verify, login via existing twofactor pipeline), DSC-2FA login UI fix, Individual-only filter on guardian/nominee/family link pickers, Title Case normalization on client names, and migration 0296 unique nominee per account type. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> # Conflicts: # .claude/settings.local.json # fineract-provider/logs/fineract.log