Add hardware 2FA note to PayPal

Add a note to PayPal's section in _data\payments.yml, explaining that
hardware based two-factor authentication is no longer available. Fixes
#880.