hub: transfer asks for the step-up (§6.25, after #471)
tsk-rzqvv59g977k cancelled
The namespace owner's transfer (POST /projects/{owner}/{slug}/transfer, #494) asks for no step-up yet, because the hub it landed on has no second factor. Whichever of #471 and #494 merges second adds second_factor.require_step_up(conn, hub, caller) before transfer(...) in routes/projects.py, plus a test. Recorded as an open workaround in hub/context/namespace.md (Id ab5aa0b9-37cf-4d45-abe4-96b1326747e4).