- use existing access mechanisms for validation - adds swagger/schema and validation of incoming payload
- Add 2FA setup, enable, disable, and backup code management - Integrate 2FA challenge flow into login process - Add frontend modal for 2FA configuration - Support backup codes for account recovery