[Web] Add forced 2FA setup and password update enforcement

data/web/lang/lang.en-gb.json

@@ -416,6 +416,7 @@
     },
     "danger": {
         "access_denied": "Access denied or invalid form data",
+        "tfa_removal_blocked": "Two-factor authentication cannot be removed because it is required for your account.",
         "alias_domain_invalid": "Alias domain %s is invalid",
         "alias_empty": "Alias address must not be empty",
         "alias_goto_identical": "Alias and goto address must not be identical",
@@ -1221,6 +1222,11 @@
         "confirm_totp_token": "Please confirm your changes by entering the generated token",
         "delete_tfa": "Disable TFA",
         "disable_tfa": "Disable TFA until next successful login",
+        "force_tfa": "Force 2FA enrollment at login",
+        "force_tfa_info": "The user will be required to set up two-factor authentication before accessing the panel.",
+        "setup_title": "Two-Factor Authentication Required",
+        "setup_required": "Your account requires two-factor authentication. Please set up a 2FA method to continue.",
+        "cancel_setup": "Cancel and log out",
         "enter_qr_code": "Your TOTP code if your device cannot scan QR codes",
         "error_code": "Error code",
         "init_webauthn": "Initializing, please wait...",
@@ -1327,6 +1333,7 @@
         "overview": "Overview",
         "password": "Password",
         "password_now": "Current password (confirm changes)",
+        "pw_update_required": "Your account requires a password change. Please set a new password to continue.",
         "password_repeat": "Password (repeat)",
         "password_reset_info": "If no email for password recovery is provided, this function cannot be used.",
         "protocols": "Protocols",