ory/kratos ? reverse-engineered prompt

Build me a backend authentication and identity management service. I want something like Auth0 or Okta, but open-source and self-hostable. It should be a headless, API-first system written in Go so that my own front-end applications (web and mobile) can handle the user interface.

The system needs to manage all the core user flows: registration with email verification, login with passwords, social sign-in from providers like Google or GitHub, and modern options like passkeys. It definitely needs multi-factor authentication (like TOTP or SMS) and secure account recovery flows for when users forget their passwords. I'll also need basic profile management for users and a set of admin APIs to manage identities from the backend.

Please make sure it's designed to be cloud-native, so it's straightforward to deploy with Docker and can connect to a standard database like Postgres or MySQL. It should be built to be very performant and scalable from the start.