The easiest, fastest way to hack this together would be a raspberry pi zero with a display hat. It'd be chunky, but it would keep all the TOTP shared secrets off of other less reliable devices.
Could probably compile it in if discipline is a concern.