feat(web): account security page and MFA enrolment wizard

web/components/Sidebar.tsx

@@ -204,6 +204,7 @@ const navGroups: NavGroup[] = [
             // keys, capped at their own role, so gating the page would hide a
             // capability they have.
             { href: "/tokens", label: "API Keys", icon: <TokenIcon /> },
+            { href: "/account/security", label: "Security", icon: <ShieldIcon /> },
         ],
     },
     {