feat(auth): harden authentication and add configurable two-factor support

bootstrap/app.php

@@ -1,5 +1,7 @@
 <?php
 
+use App\Http\Middleware\AddSecurityHeaders;
+use App\Http\Middleware\EnforceAbsoluteSessionTimeout;
 use App\Http\Middleware\EnsureTwoFactorAuthenticationIsEnabled;
 use App\Http\Middleware\HandleInertiaRequests;
 use Illuminate\Foundation\Application;
@@ -19,7 +21,10 @@ return Application::configure(basePath: dirname(__DIR__))
         },
     )
     ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->append(AddSecurityHeaders::class);
+
         $middleware->web(append: [
+            EnforceAbsoluteSessionTimeout::class,
             HandleInertiaRequests::class,
             EnsureTwoFactorAuthenticationIsEnabled::class,
         ]);