Two-factor authentication for Nova 5: authenticator apps, passkeys, email codes and recovery codes, with enforcement policies, step-up re-auth and trusted devices.