MfaEnrollWithTokenRequest(MfaEnrollWithTokenRequest)

POST /v2/oauth/mfaEnrollWithToken body. Persists an MFA registration in MultifactorAuth for the JWT-holder. Auth via Bearer JWT in the Authorization header (or ns_access_token cookie as fallback) — ns_id is taken from the JWT's sub claim and ns_id_type is hardcoded to 'subscriber' server-side. Server re-verifies the passcode before writing; success returns 200 with {status, message, enrolled}.

{
    "mfa_key": "VJTV4FEP65E7PDSS",
    "mfa_vendor": "google",
    "mfa_type": "authenticator",
    "mfa_passcode": "847291"
}