Allow group owners to disable 2FA for individual Enterprise users

Proposal

For top-level group owners (future Workspace admin), provide a "Disable 2FA" button to remove 2FA for specific users.

These Owners should be able to disable 2FA for any Enterprise users within the group.

Most likely, the best place to put it is with other user management pieces such as #300184 , possibly similar to #227841 (comment 1028089554)

Visuals

disable behavior in self managed	update modal	Current table view of Group members	proposed change to Group members screen