-- DentalCare v0.9.0.3
-- Privileged MFA, Staff Session Security, and Bulk Service Staffing
--
-- Runtime applies this migration idempotently through setup_apply_v0903().
-- It creates encrypted TOTP/recovery-code storage, activates stronger staff
-- session controls, and records the cross-pagination service staffing policy.
-- No patient, appointment, clinical, billing, or staffing record is deleted.
