Enable email two-factor authentication

Add a second layer to sign-in on untrusted devices.

Full article body will move into a content pipeline in a follow-up PR; this stub makes the help-center links land on a page instead of a 404.