Draft: refactor: consolidate email OTP required logic
Relates to issue #579580
This MR was created by Duo in Session 1241459
Changes
- Consolidate "email OTP required?" logic from multiple locations into a single, reusable method on the User model
- Ensure consistent behavior across VerifiesWithEmail controller, SessionsHelper, and User model
- Maintain existing functionality while improving code maintainability and reducing duplication