Returns a TOTP secret and an otpauth:// provisioning URI for a business. Render the URI as a QR code (or expose the base32 secret) so the operator can add the entry to their authenticator app, then call /business/resume/setup-two-factor with the first 6-digit code. — Requires 'totp' to be present in the application's allowedScaMethods.