Make Two-Factor Authentication provider-pluggable

[DawoudIO]

Goal: Make 2FA providers pluggable to support TOTP, SMS, and push providers via plugins. Scope: Refactor 2FA code to use provider interface, create an example TOTP provider plugin. Acceptance: Core supports provider registration; at least one provider plugin exists.

[github-actions]

Thanks for opening an issue!

We couldn't auto-detect the issue type. To help us route your issue correctly, please do one of the following:

1. Add a label: Add the Type:Bug or Type:Question label to this issue (if you have permission)
2. Re-create with a template: Close this issue and create a new one using the Bug Report or Question template
3. Just tell us: Reply below with whether this is a bug report or a question, and provide the relevant details

---

For bug reports, please include:

• A short summary of the problem
• Steps to reproduce (if you have them)
• Any relevant logs or screenshots (redact private data)

For questions, please include:

• What you're trying to do
• What you've already tried

To collect system debug info, if you're an admin:

👉 Admin → System Maintenance → System Logs (or click the debug icon)

Advanced users: If the issue is reproducible in the UI, the Cypress Recorder helps. Capture the steps and attach an exported spec.

👉 Bug Reporting & Diagnostics Guide

---

Note: ChurchCRM is maintained by volunteers. While we try to respond to every issue quickly, there may be a delay in our response depending on availability. Thank you for your patience! 🙏