Problem:

When 2FA is enforced by an admin, users are currently not blocked during login.
They can successfully log in, but:

• Vault items are not accessible
• The CLI cannot be used properly

This results in a confusing and broken user experience.

Solution

Block the user during the sync stage if:

• 2FA is enforced by an admin
• the 2FA setup has not been completed in the extension

In this case, the user is shown an explicit error message prompting them to:

• Open the extension
• Complete the required 2FA setup flow

Changes

• Introduced twoFactorAuthEnforcedChecker to detect and block incomplete 2FA setups during sync