One commenter mentioned aqbanking, which is open-source and can navigate various kinds of 2FA shenanigans via the FinTS protocol. For example, it communicates to my card reader via USB, and relays the resulting TAN back to the bank server.