Support sms-based two-factor authentication

Problem
Front only supports 2FA via authenticator apps. If a user loses their phone or switches devices, they lose access to their authenticator codes and cannot log in.

Request
Add SMS as an alternative 2FA method so users can receive verification codes via phone number as a backup or primary option.