feat: separate 2fa refresh from 1st factor refresh #4435

Job	Run time
Generate SDKs	1m 12s
Run tests and lints	19m 48s
Run Playwright end-to-end tests (postgres)	10m 10s
Run end-to-end tests (postgres)	43m 36s
Run Playwright end-to-end tests (cockroach)	10m 20s
Run end-to-end tests (cockroach)	47m 35s
Run Playwright end-to-end tests (sqlite)	10m 27s
Run end-to-end tests (sqlite)	46m 11s
Run Playwright end-to-end tests (mysql)	10m 7s
Run end-to-end tests (mysql)	45m 27s
Build CLI docs	0s
Generate changelog	0s
Generate release	0s
Release SDKs	0s
Render version schema	0s
Draft newsletter	0s
Pending approval Slack notification	0s
Send newsletter	0s
	4h 4m 53s

Provide feedback