Issue:
Bug: refactor(users): Force 2FA in prod env



Currently 2FA is not forced on prod, users have ability to skip it. 

For the PCI compliance, we have to force users to setup and use 2FA.

Pull request description:
## Type of Change
<!-- Put an `x` in the boxes that apply -->

- [ ] Bugfix
- [ ] New feature
- [ ] Enhancement
- [x] Refactoring
- [ ] Dependency updates
- [ ] Documentation
- [ ] CI/CD

## Description
<!-- Describe your changes in detail -->
This PR forces users to use 2FA in production.

### Additional Changes

- [ ] This PR modifies the API contract
- [ ] This PR modifies the database schema
- [x] This PR modifies application configuration/environment variables

<!--
Provide links to the files with corresponding changes.

Following are the paths where you can find config files:
1. `config`
2. `crates/router/src/configs`
3. `loadtest/config`
-->
`config/deployments/production.toml`


## Motivation and Context
<!--
Why is this change required? What problem does it solve?
If it fixes an open issue, please link to the issue here.

If you don't have an issue, we'd recommend starting with one first so the PR
can focus on the implementation (unless it is an obvious bug or documentation fix
that will have little conversation).
-->

Closes #6592.
## How did you test it?
<!--
Did you write an integration/unit/API test to verify the code changes?
Or did you test this change manually (provide relevant screenshots)?
-->
This change will only affect production.
1. 2FA Status API
  - `is_skippable` field is added in the response.
    ```
    curl --location 'http://localhost:8080/user/2fa/v2' \
    --header 'Authorization: JWT' \
    ```
    ```
    {
        "status": null,
        "is_skippable": true
    }
    ```
2. Terminate 2FA API
  - This API will now not allow skip 2FA if the `force_two_factor_auth`
    ```
    curl --location 'http://localhost:8080/user/2fa/terminate?skip_two_factor_auth=true' \
    --header 'Authorization: JWT' \
    ```
    ```
    {
        "error": {
            "type": "invalid_request",
            "message": "Two factor auth required",
            "code": "UR_40"
        }
    }
    ```


## Checklist
<!-- Put an `x` in the boxes that apply -->

- [x] I formatted the code `cargo +nightly fmt --all`
- [x] I addressed lints thrown by `cargo clippy`
- [x] I reviewed the submitted code
- [ ] I added unit tests for my changes where possible


Testing:

This change will only affect production.
1. 2FA Status API
  - `is_skippable` field is added in the response.
    ```
    curl --location 'http://localhost:8080/user/2fa/v2' \
    --header 'Authorization: JWT' \
    ```
    ```
    {
        "status": null,
        "is_skippable": true
    }
    ```
2. Terminate 2FA API
  - This API will now not allow skip 2FA if the `force_two_factor_auth`
    ```
    curl --location 'http://localhost:8080/user/2fa/terminate?skip_two_factor_auth=true' \
    --header 'Authorization: JWT' \
    ```
    ```
    {
        "error": {
            "type": "invalid_request",
            "message": "Two factor auth required",
            "code": "UR_40"
        }
    }
    ```

Patch:
diff --git a/config/deployments/production.toml b/config/deployments/production.toml
index 73e5794f042..76f42085f92 100644
--- a/config/deployments/production.toml
+++ b/config/deployments/production.toml
@@ -149,7 +149,7 @@ password_validity_in_days = 90
 two_factor_auth_expiry_in_secs = 300
 totp_issuer_name = "Hyperswitch Production"
 base_url = "https://live.hyperswitch.io"
-force_two_factor_auth = false
+force_two_factor_auth = true
 
 [frm]
 enabled = false