Validate Telegram Login Widget Auth Payloads in PHP and Yii2

Verify Telegram Login Widget authentication payloads using HMAC-SHA-256, enforce auth_date freshness, and bind telegram_id to users in Yii2.