OCA/server-auth ? reverse-engineered prompt

Build me an Odoo add on bundle for server authentication and login management.

I want a set of modules that help secure user access in a business app, things like API key login, JWT and SAML or OIDC sign in, OAuth improvements, session timeout, stronger password rules, email verification, TOTP enforcement, and a few admin tools like impersonation, passkeys, and viewing user activity logs.

It should feel like a proper Odoo community project, with separate installable modules that can be used independently, good defaults, and clean documentation for each feature. If anything depends on current Odoo auth behavior, look up the latest docs online if you need to.

Please make it work for the current 18.0 branch and keep it organized so it would be easy for an Odoo admin or integrator to turn on only the pieces they want.