Two-factor authentication (2FA) for sign-in

Sign-in is magic-link only, so there is no password to protect with a second factor. This request is for optional TOTP (authenticator app) on top of the magic link for accounts that want it. Nothing is built here yet. We are weighing it against the effort of full SSO, which larger teams tend to ask for first.