Implement MFA Enforcement

src/hooks/useRequireMFA.ts

@@ -0,0 +1,21 @@
+import { useAuth } from './useAuth';
+import { useUserRole } from './useUserRole';
+
+export function useRequireMFA() {
+  const { aal } = useAuth();
+  const { isModerator, isAdmin, loading } = useUserRole();
+  
+  // MFA is required for moderators and admins
+  const requiresMFA = isModerator() || isAdmin();
+  
+  // User has MFA if they have AAL2
+  const hasMFA = aal === 'aal2';
+  
+  return {
+    requiresMFA,
+    hasMFA,
+    needsEnrollment: requiresMFA && !hasMFA,
+    aal,
+    loading,
+  };
+}