Harden checkout OTP: prevent dev-tools bypass, timing-safe comparison, phone pinning#9

Copilot wants to merge 5 commits intomainsms-bd/alpha_sms-wordpress-plugin:mainfrom

copilot/propose-plugin-architecture-otpsms-bd/alpha_sms-wordpress-plugin:copilot/propose-plugin-architecture-otpCopy head branch name to clipboard