fix: dashboard TOTP status always showing inactive

loadAuthData() didn't include totp_enabled or require_2fa in the
AuthData response. The frontend always saw undefined → false.

Now includes both fields from the database.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/types/index.ts

@@ -51,6 +51,8 @@ export interface AuthData {
   roleId: number | null;
   roleName: string | null;
   permissions: string[];
+  totp_enabled?: boolean;
+  require_2fa?: boolean;
 }
 
 export interface JwtPayload {