Improve security by requiring higher authentication levels for sensitive actions

Update authentication flows to enforce AAL2 requirements for MFA operations and identity disconnections, and adjust TOTP verification logic.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: da324197-4d44-4e4b-b342-fe8ae33cf0cf
Replit-Commit-Checkpoint-Type: intermediate_checkpoint

src/types/identity.ts

@@ -33,4 +33,5 @@ export interface IdentityOperationResult {
   needsRelogin?: boolean;
   needsEmailConfirmation?: boolean;
   email?: string;
+  requiresAAL2?: boolean;
 }