feat(auth): harden authentication and add configurable two-factor support

config/auth-ui.php

@@ -31,6 +31,12 @@ return [
         'two_factor_required' => env('AUTH_REQUIRE_TWO_FACTOR', false),
     ],
 
+    'security' => [
+        'log_channel' => env('AUTH_SECURITY_LOG_CHANNEL', env('LOG_CHANNEL', 'stack')),
+        'two_factor_challenge_timeout' => (int) env('AUTH_TWO_FACTOR_CHALLENGE_TIMEOUT', 300),
+        'absolute_session_lifetime' => (int) env('AUTH_ABSOLUTE_SESSION_LIFETIME', 28800),
+    ],
+
     /*
     |--------------------------------------------------------------------------
     | Login Page Configuration