fix(2fa): do not allow to enforce 2FA when having recovery codes only

[oioki]

Currently, when an owner has only recovery codes (backup interface), this still allows them to enforce 2FA for the organization what is wrong.

The requirement of having a proper 2FA method was implemented in #6812 but it was broken during HC changes in #44219.

The has_2fa() method has a different semantic in the regional silo:

sentry/src/sentry/users/services/user/model.py

Lines 124 to 125 in e362bf5

	def has_2fa(self) -> bool:
	return len(self.authenticators) > 0

vs control silo:

sentry/src/sentry/users/models/user.py

Lines 239 to 242 in e362bf5

	def has_2fa(self) -> bool:
	return Authenticator.objects.filter(
	user_id=self.id, type__in=[a.type for a in available_authenticators(ignore_backup=True)]
	).exists()