feat(auth): harden authentication and add configurable two-factor support

app/Http/Middleware/EnsureTwoFactorAuthenticationIsEnabled.php

@@ -24,18 +24,22 @@ class EnsureTwoFactorAuthenticationIsEnabled
         if ($request->expectsJson()) {
             return response()->json([
                 'message' => 'Two-factor authentication setup is required.',
-                'setup_url' => route('profile.show'),
+                'setup_url' => route('two-factor.setup'),
             ], 403);
         }
 
-        return redirect()->route('profile.show')
+        if ($request->isMethod('GET')) {
+            $request->session()->put('url.intended', $request->fullUrl());
+        }
+
+        return redirect()->route('two-factor.setup')
             ->with('error', 'Two-factor authentication is required before you can continue.');
     }
 
     private function isEnrollmentRoute(Request $request): bool
     {
         return $request->routeIs([
-            'profile.*',
+            'two-factor.setup*',
             'logout',
             'verification.*',
         ]);