2-factor authentication

[mikesealey]

Describe the feature request
In-built 2FA to make login more secure when not using SSO

• Should be applied/enforced per-workspace or per user
• Sending email verification-codes would limit additional scope (ie avoiding the need for authenticator apps, and the additional complexity they bring with them)

Feature raised by CSE on behalf of Enterprise customer: cnv_1bsfnxau

[Maximebaker]

Oh yea. 🦍

[NDCallahan]

This would be nice. Though, after a MVP release, I'd suggest to bring in third party authenticator apps. More importantly, using a passkey could be extremely beneficial.