feat(auth,privacy,web): step-by-step login, privacy settings persistence, TOTP QR, and API docs

app/auth/schemas.py

@@ -1,6 +1,7 @@
 from datetime import datetime
 
 from pydantic import BaseModel, ConfigDict, EmailStr, Field
+from app.users.schemas import GroupInvitePrivacyLevel, PrivacyLevel
 
 
 class RegisterRequest(BaseModel):
@@ -58,6 +59,10 @@ class AuthUserResponse(BaseModel):
     avatar_url: str | None = None
     email_verified: bool
     twofa_enabled: bool
+    allow_private_messages: bool = True
+    privacy_last_seen: PrivacyLevel = "everyone"
+    privacy_avatar: PrivacyLevel = "everyone"
+    privacy_group_invites: GroupInvitePrivacyLevel = "everyone"
     created_at: datetime
     updated_at: datetime
 
@@ -76,3 +81,10 @@ class TwoFactorSetupRead(BaseModel):
 
 class TwoFactorCodeRequest(BaseModel):
     code: str = Field(min_length=6, max_length=8)
+
+
+class EmailStatusResponse(BaseModel):
+    email: EmailStr
+    registered: bool
+    email_verified: bool = False
+    twofa_enabled: bool = False