Building Secure TOTP Two-Factor Authentication (RFC 6238) in Dart/Flutter

Most "add 2FA" tickets turn into a scramble because the algorithm feels like it should be obscure, when really it's a short, well-specified RFC that Google Authenticator, Authy, 1Password, and every o