GitLab

Adds warnings on the configuration key-value list and key edit pages
for deprecated keys, as defined in the `APP_CONFIG_DEPRECATED_ENTRIES`
constant in `config/default_config.rb`.

This adds the 'allow-outside-file-upload' key to the deprecation list,
that key was deprecated in v1.1.1 (see commit d3b40219 for details).

This is a rather large commit, so here's a summary:

- Renamed "two-factor" to "multi-factor" everywhere
- Changed path from "/account/twofactor" to "/account/mfa"
- Separated "enabled" and "disabled" index pages
  (this was done with a conditional in the template previously)
- Require password when disabling MFA
- Split TOTP setup out into it's own controller
- Split recovery code settings out into their own controller
- Only allow viewing recovery codes at the time of generation
  (previously, the existing codes could be viewed at any time)

This starts the process of renaming "two-factor" to "multi-factor".

This also integrates the recovery code handling into the same form,
allowing typing a recovery code into the TOTP field, which brings it
in line with how EARMMS currently handles this. Currently, any input
over 8 characters (after removing spaces and hyphens) is assumed to be
a recovery code.

This is going to be used to replace the existing recovery code token
generation (which is currently just taking the first 12 chars of
`Token#generate`)

Huge thanks to Ruby New Zealand for helping out the project!

Closes #16.

This inverts the meaning of the configuration key, bringing it in line
with the other "disable-*" configuration keys.

At least, in user-facing views.

This stops a relationship from counting against the "penpal_count" mode
of PenpalStatusTransitionWorker.

This changes all `type="number"` fields to `type="text"`, additionally
setting `inputmode="numeric" pattern="[0-9]*"` - meaning that numeric
keyboards will still be used on touchscreen devices and only numeric
values can be provided. 

This is an accessibility tweak, so that the fields don't provide "up"
and "down" spinner buttons - there is no place in re:connect in which
spinner buttons on numeric fields make sense (especially on the TOTP
code entry!)

This adds a checkbox to the penpal edit screen that sets the flag
`status_override` on the penpal object. If this flag is set, automatic
status changes don't happen for that penpal. This is accomplished by
pushing `false` to the `do_transition` list at the start of the penpal
handling in PenpalStatusTransitionWorker.

This lets us add announcements to the database that are displayed at
the top of the page. There's currently no UI for adding/removing these,
that'll come at a later stage.