a fresh code shows on the token, and the lock opens only once it is keyed in.
pnpm dlx shadcn@latest add "https://illos.dev/r/two-factor.json"