Fixes:
* Fix invalid HTML on recovery code page, caused by nesting h2 in h2
* Remove rodauth.otp_keys_use_hmac? branch, since that is always true in
our Rodauth configuration.
I moved the closing nocov for Config.test? specific routes to ensure that
those are covered in tests (still need nocov to handle the implied else
branch not taken).
After changes (rebased on main since last commit, so totals have changed):
Line Coverage: 99.39% (11192 / 11261)
Branch Coverage: 97.0% (2841 / 2929)
4e76b20b27