Refine MFA factor management

[bifrost0x]

Implements the latest follow-up from Discussion #148.

Summary

• show the account-wide MFA state and global enable/disable actions centrally
• group Passkeys, authenticator apps, and Recovery codes before unrelated security settings
• support target-bound deletion of individual TOTP authenticators
• share the last-durable-factor protection across Passkey and TOTP deletion
• refresh factor lists and MFA state dynamically with accessible factor rows
• update translations, documentation, browser coverage, and design QA

Verification

• 2,194 Python tests passed; 29 skipped
• focused security regression suite: 79 passed
• JavaScript unit test, syntax validation, ESLint, and i18n parity passed
• browser console and combined reference/implementation design QA passed
• git diff --check passed

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e12b4bb2e8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".