Doctor/Admin two-step verification.

Doctor/admin login first. A verification code will be emailed after the password is accepted.

Login diagnostics: doctorIdHint is sent to the secure login API when opened from a doctor card. Reset password sends a secure Firebase reset email. Passwords are never shown or saved in Firestore.