Return otpauth URL in the create user endpoint

[kimitrii]

Changes Made

This PR adds a new feature to the create user endpoint, enabling the generation of an OTP secret and returning an otpauth URL when the isTotpEnable input is true. This allows users to set up passwordless authentication using apps like Google Authenticator and Microsoft Authenticator.

Additionally, it fixes the Totp regex for user and service strings to allow dots and introduces the OTP_SECRET environment variable, which will be used as secret input for WebEncryptAES library to encrypt Totp generated secrets. A new database table has also been created to store OTP secrets, which are encrypted using WebEncryptAES before being saved, ensuring enhanced security during authentication.

Changes Type

• Bug fix
• New feature
• Breaking change (When isTotpEnable is true in the create user endpoint, the successful response will return the otpauth URL)

Checklist:

• The changes do not generate new error logs or warnings.
• I have added tests that prove the fix or new feature works as expected.
• Both new and existing tests pass locally.