Goal: Import Yandex Key OTP locally

Use Krypton Execution to execute docs/goals/yandex-key-import/PLAN.md. Preserve the two auth modes and previous dirty work. Reuse Keychain/PyOTP, verify the selected record before writes, and keep secrets out of logs. Capture synthetic end-to-end wizard/launch evidence; no real backup, Keychain, GUI or VPN tests are authorized.