feat(auth): add option to enforce second factor authentication

[nijel]

Proposed changes

Built on top of #12173

• projects can define this and it will block users from editing
• teams can define this and roles from the teams will not be applied unless user is 2fa verified
• middleware warns user about not meeting this requirement

Checklist

• Lint and unit tests pass locally with my changes.
• I have added tests that prove my fix is effective or that my feature works.
• I have added documentation to describe my feature.
• I have squashed my commits into logic units.
• I have described the changes in the commit messages.

Other information

[codecov]

Codecov Report

Attention: Patch coverage is 95.34884% with 2 lines in your changes missing coverage. Please review.

Project coverage is 91.14%. Comparing base (69d534f) to head (60a5ceb).
Report is 6 commits behind head on main.

Files	Patch %	Lines
weblate/auth/permissions.py	50.00%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #12200      +/-   ##
==========================================
- Coverage   91.16%   91.14%   -0.02%     
==========================================
  Files         586      588       +2     
  Lines       60092    60152      +60     
  Branches     9505     9513       +8     
==========================================
+ Hits        54780    54823      +43     
- Misses       3681     3693      +12     
- Partials     1631     1636       +5     

Files	Coverage Δ
weblate/accounts/tests/test_twofactor.py	100.00% <100.00%> (ø)
weblate/accounts/views.py	84.32% <ø> (ø)
weblate/api/serializers.py	92.30% <ø> (ø)
weblate/auth/forms.py	93.93% <100.00%> (ø)
weblate/auth/migrations/0006_group_enforced_2fa.py	100.00% <100.00%> (ø)
weblate/auth/models.py	92.37% <100.00%> (+0.14%)	⬆️
weblate/trans/forms.py	90.12% <ø> (ø)
...late/trans/migrations/0022_project_enforced_2fa.py	100.00% <100.00%> (ø)
weblate/trans/models/project.py	92.75% <100.00%> (+0.02%)	⬆️
weblate/auth/permissions.py	90.37% <50.00%> (-0.61%)	⬇️

... and 10 files with indirect coverage changes

[orangesunny]

@nijel, I would wait with a review until 12173 is merged, as it touches the same files and I did some corrections there. I would rather not get lost or create conflicts.

[nijel]

Ready for review, #12173 is merged and this one rebased on top of that.

[orangesunny]

Good to go; can’t wait to use it!