-- TOTP 2FA: per-user TOTP secret and enabled flag.

ALTER TABLE users ADD COLUMN IF NOT EXISTS totp_secret  VARCHAR(255);
ALTER TABLE users ADD COLUMN IF NOT EXISTS totp_enabled BOOLEAN NOT NULL DEFAULT FALSE;
