2FA: add recovery codes

Bengfort requested to merge mfa-recovery into main

Merge request reports