Repository: nodejs/node
Pull request: doc: remove mention of SMS 2FA

I got the list from https://github.com/organizations/nodejs/settings/security, I couldn't find it in GitHub documentation.

Refs: https://github.com/nodejs/admin/issues/1005

<!--
Before submitting a pull request, please read:

- the CONTRIBUTING guide at https://github.com/nodejs/node/blob/HEAD/CONTRIBUTING.md
- the commit message formatting guidelines at
  https://github.com/nodejs/node/blob/HEAD/doc/contributing/pull-requests.md#commit-message-guidelines

For code changes:
1. Include tests for any bug fixes or new features.
2. Update documentation if relevant.
3. Ensure that `make -j4 test` (UNIX), or `vcbuild test` (Windows) passes.

If you believe this PR should be highlighted in the Node.js CHANGELOG
please add the `notable-change` label.

Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
    have the right to submit it under the open source license
    indicated in the file; or

(b) The contribution is based upon previous work that, to the best
    of my knowledge, is covered under an appropriate open source
    license and I have the right under that license to submit that
    work with modifications, whether created in whole or in part
    by me, under the same open source license (unless I am
    permitted to submit under a different license), as indicated
    in the file; or

(c) The contribution was provided directly to me by some other
    person who certified (a), (b) or (c) and I have not modified
    it.

(d) I understand and agree that this project and the contribution
    are public and that a record of the contribution (including all
    personal information I submit with it, including my sign-off) is
    maintained indefinitely and may be redistributed consistent with
    this project or the open source license(s) involved.
-->


Changed files:
filename: onboarding.md
patch: @@ -8,8 +8,8 @@ onboarding session.
 * If the new Collaborator is not yet a member of the nodejs GitHub organization,
   confirm that they are using [two-factor authentication][]. It will not be
   possible to add them to the organization if they are not using two-factor
-  authentication. If they cannot receive SMS messages from GitHub, try
-  [using a TOTP mobile app][].
+  authentication. Ask them to use secure two-factor methods: authenticator apps,
+  passkeys, security keys, and/or the GitHub mobile app.
 * Suggest the new Collaborator install [`@node-core/utils`][] and
   [set up the credentials][] for it.
 
@@ -303,5 +303,4 @@ needs to be pointed out separately during the onboarding.
 [set up the credentials]: https://github.com/nodejs/node-core-utils#setting-up-github-credentials
 [static-analysis]: doc/contributing/static-analysis.md
 [two-factor authentication]: https://help.github.com/articles/securing-your-account-with-two-factor-authentication-2fa/
-[using a TOTP mobile app]: https://help.github.com/articles/configuring-two-factor-authentication-via-a-totp-mobile-app/
 [who-to-cc]: doc/contributing/collaborator-guide.md#who-to-cc-in-the-issue-tracker