Also ports TOTP RFC 6238 compute to relicario-core::item_types::totp so native + CLI + WASM share one implementation (audit H5: CSPRNG via core's Uniform-sampling generator). Adds hmac = "0.12" and sha1 = "0.10" to relicario-core deps to support HOTP/TOTP HMAC with Sha1/Sha256/Sha512. RFC 6238 test vector (t=59, SHA-1, 8 digits) passes: "94287082".