adopt TPA-RFC-46: enforce 2FA in tpo/team
authored
by
I have actually clicked the button after checking with hiro. She's okay with the switch, and the 48h grace period is sufficient. Closes: #40892