sanitizeOtp

fun sanitizeOtp(input: String, length: Int): String

Digits only, capped at length. Applied to every edit, so pasting "OTP: 123 456" from a notification yields "123456" rather than being rejected — the single most common way a user actually enters a code.