feat: show if user has 2fa or is federated user in api

[shreddedbacon]

General Checklist

• Affected Issues have been mentioned in the Closing issues section
• Documentation has been written/updated
• PR title is ready for inclusion in changelog

Database Migrations

• If your PR contains a database migation, it MUST be the latest in date order alphabetically

Description

Currently the only way to check if a user has 2fa enabled is to log in to keycloak as admin to check users individually. This is not ideal, as it can be time consuming and requires users to log in to keycloak directly, which we want to limit.

Another is detecting if a user is using an identity provider instead of direct user access.

This feature will now show if a user has 1 or more 2fa features enabled by setting a has2faEnabled flag on their account in the API. It currently can detect if a user is using totp or webauthn, but the flag is just a true|false

The federated user check will also only detect if the user has any federated identities, and if so will flag the user as a federated user. This appears as isFederatedUser which is also a true|false

The UI could also be extended to display this status so organization owners can see which of their users have 2fa enabled, or which are federated users (SSO).

Example in organization users page:

[rocketeerbkw]

Discussed and approved.