CHW-4115 TOTPSetupMissing

no TOTP setup in progress; start setup before verifying a code

Default message: no TOTP setup in progress; start setup before verifying a code
HTTP status: 400 (client)

Problem. Verify step could not find the encrypted TOTP secret. Cause. The server has no totp_secret for this user — either setup was skipped or the secret was cleared out. Fix. Call /api/settings/2fa/setup to restart enrolment. HTTP 400.