Introduces new security settings to enforce multi-factor authentication (MFA) for admin and/or non-admin users, configurable via backend properties and frontend UI. Updates user creation and management logic to respect these settings, and enhances the admin interface to allow toggling MFA enforcement.