refactor(auth): 2FA and OTP are disabled in prod environment.

[CotSezer]

This PR disables One-Time Password (OTP) validation and Two-Factor Authentication (2FA) enforcement in the production environment. The change ensures that authentication and login flows function without requiring OTP or 2FA while keeping the application logic intact.

---

Changes Made

• Disabled real OTP validation logic in production.

  • OTP input is now statically accepted with the value 000000.

• Disabled 2FA enforcement across authentication flows.

• Disabled related security-dependent features:

  • Email verification
  • Forgot password reset link functionality

• Updated authentication flow to allow successful login without OTP/2FA checks.

---

Acceptance Criteria Coverage

• ✅ Real OTP validation disabled; fixed OTP value set to 000000
• ✅ 2FA enforcement disabled (including email verification and password reset links)
• ✅ Login and authentication flows work correctly without OTP/2FA in production

---

Testing

• Verified login flow succeeds without OTP/2FA in production configuration
• Confirmed OTP input 000000 is accepted
• Ensured no authentication blockers related to 2FA, email verification, or password reset

---

Rollback Plan

• Re-enable OTP validation and 2FA enforcement via configuration and restore original authentication logic.

---

Closes #538

[enverern]

The necessary refactoring has been implemented correctly.