feat(webauthn) Merge totp plugin in webauthn

It would be too complicated to split totp and webauthn as they would
 both need to rely on the recovery code and other 2FA specificities.

issue #6019