Require 2FA for creating a new project

[dstufft]

We can start requiring 2FA to be enabled when creating a new project, to help ratchet more users into 2FA earlier.

[sethmlarson]

@dstufft I'm seeing many "Require 2FA to do X", is it sensible to also require the same for new users in general? That way expectations are set right away rather than "You can create an account but immediately after trying to do anything you need 2FA".

[dstufft]

@sethmlarson That's #13762

[sethmlarson]

Ah I see, thanks for pointing that one out!

[di]

Closing now that 2FA is required for all users.