feat(settings): add security center, 2FA/TOTP, avatar upload, system settings

- Add TOTP implementation and two-factor data-access for 2FA enrollment

- Add security center card with password policy and session management

- Add avatar upload action and component

- Add system settings actions and data-access (actions-system-settings, data-access-system-settings)

- Add notification preferences and service actions

- Add security-utils and student-overview-data with tests

- Update existing settings views, data-access, and types for new features

src/modules/settings/components/ai-provider-settings-card.tsx

@@ -11,6 +11,7 @@ import { Loader2, Save, Sparkles } from "lucide-react"
 import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "@/shared/components/ui/card"
 import { Button } from "@/shared/components/ui/button"
 import { Checkbox } from "@/shared/components/ui/checkbox"
+import { Label } from "@/shared/components/ui/label"
 import {
   Form,
   FormControl,
@@ -253,7 +254,7 @@ export function AiProviderSettingsCard({
       <CardContent className="space-y-6">
         <div className="grid gap-4 sm:grid-cols-2">
           <div className="space-y-2">
-            <FormLabel>{t("existing")}</FormLabel>
+            <Label>{t("existing")}</Label>
             <Select value={selectedId || NEW_PROVIDER_VALUE} onValueChange={handleSelectChange}>
               <SelectTrigger>
                 <SelectValue placeholder={t("selectPlaceholder")} />
@@ -269,7 +270,7 @@ export function AiProviderSettingsCard({
             </Select>
           </div>
           <div className="space-y-2">
-            <FormLabel>{t("keyStatus")}</FormLabel>
+            <Label>{t("keyStatus")}</Label>
             <div className="rounded-md border px-3 py-2 text-sm text-muted-foreground">
               {selectedProvider?.apiKeyLast4
                 ? `${t("stored")} • ****${selectedProvider.apiKeyLast4}`