Maity: Board

hub: adopt F's two-factor PRs #379 → #380, rebase and re-point migration

tsk-0x2h7ajz2zaz cancelled

F's PRs #379 (2FA part 1) and #380 (part 2, stacked) were approved by the reviewer and H earlier (#379 cda5a3d, #380 54bf4cf) but conflict with main now. F has stopped. Steps: rebase #379 onto main, re-point its migration onto main's head (0055 → ask A for the number), then #380 onto #379. Reviewer delta recheck + H final on the new heads, then A merges. Open step-9 items from the earlier review are in the PR threads.