Prototype: OTP auth, styleguide overhaul, login/session rework

Replace password reset with email OTP verification flow.
Add auth_otp module, OTP templates, and email delivery.
Expand styleguide CSS with full component library.
Rework login, register, and admin views for cookie sessions.
Remove legacy 2FA templates and password reset flow.
Update SSH wrappers, forms, validators, and middleware.

rhodecode/apps/repository/views/repo_settings_advanced.py

@@ -26,6 +26,7 @@ from rhodecode.apps._base import RepoAppView
 from rhodecode.lib import helpers as h
 from rhodecode.lib import audit_logger
 from rhodecode.lib.auth import LoginRequired, HasRepoPermissionAnyDecorator, CSRFRequired, HasRepoPermissionAny
+from rhodecode.lib.auth_otp import SudoOTPRequired
 from rhodecode.lib.exceptions import AttachedForksError, AttachedPullRequestsError, AttachedArtifactsError
 from rhodecode.lib.type_utils import str2bool
 from rhodecode.lib.utils2 import safe_int
@@ -142,6 +143,7 @@ class RepoSettingsAdvancedView(RepoAppView):
     @LoginRequired()
     @HasRepoPermissionAnyDecorator("repository.admin")
     @CSRFRequired()
+    @SudoOTPRequired
     def edit_advanced_delete(self):
         """
         Deletes the repository, or shows warnings if deletion is not possible