feat: implement otp sms session challenge (#11919)

# Which Problems Are Solved

This PR adds the OTP SMS Challenge needed for CreateSession API
https://github.com/zitadel/zitadel/issues/11035

# How the Problems Are Solved

- Introduce `OTPSMSChallengeCommand` (validate/execute/events) for
session creation checks
- Introduce `GetOTPCryptoGeneratorConfigWithDefault` to fetch
per-instance secret generator settings
- Add unit tests

# Additional Changes

Refactor tests in `session_check_recovery_code_test.go` to make the
helper functions reusable in `session_challenge_otp_sms_test.go`

# Additional Context
Related to https://github.com/zitadel/zitadel/issues/11035

backend/v3/domain/defaults.go

@@ -8,12 +8,14 @@ import (
 )
 
 var (
-	pool database.Pool
-	legacyEventstore  eventstore.LegacyEventstore
-	sysConfig         systemdefaults.SystemDefaults
-	passwordHasher    *crypto.Hasher
-	idpEncryptionAlgo crypto.EncryptionAlgorithm
-	sessionTokenDecryptor SessionTokenDecryptor
+	pool                        database.Pool
+	legacyEventstore            eventstore.LegacyEventstore
+	sysConfig                   systemdefaults.SystemDefaults
+	passwordHasher              *crypto.Hasher
+	idpEncryptionAlgo           crypto.EncryptionAlgorithm
+	sessionTokenDecryptor       SessionTokenDecryptor
+	mfaEncryptionAlgo           crypto.EncryptionAlgorithm
+	otpSMSSecretGeneratorConfig *crypto.GeneratorConfig
 )
 
 func SetPool(p database.Pool) {
@@ -39,3 +41,11 @@ func SetIDPEncryptionAlgorithm(idpEncryptionAlg crypto.EncryptionAlgorithm) {
 func SetSessionTokenDecryptor(decryptor SessionTokenDecryptor) {
 	sessionTokenDecryptor = decryptor
 }
+
+func SetOTPSMSSecretGeneratorConfig(cfg *crypto.GeneratorConfig) {
+	otpSMSSecretGeneratorConfig = cfg
+}
+
+func SetMFAEncryptionAlgorithm(mfaEncryptionAlg crypto.EncryptionAlgorithm) {
+	mfaEncryptionAlgo = mfaEncryptionAlg
+}