feat(cognito): add MfaSecondFactor support to CognitoUserPoolConstruct

[ncipollina]

Summary

Adds MfaSecondFactor as an optional property on ICognitoUserPoolConstructProps and CognitoUserPoolConstructProps. When set, it is passed directly to the CDK UserPoolProps, allowing callers to enable TOTP (Otp = true) or SMS (Sms = true) as a second authentication factor alongside the existing Mfa setting. Bumps the package version to 2.3.0.

Changes

• CognitoUserPoolConstructProps — added nullable MfaSecondFactor? MfaSecondFactor to both the interface and the concrete record (defaults to null, fully backward compatible)
• CognitoUserPoolConstruct — wires props.MfaSecondFactor through to UserPoolProps.MfaSecondFactor
• Directory.Build.props — version bumped from 2.2.0 to 2.3.0

Validation

• Existing tests pass without modification — the new property is nullable and existing test builders do not set it
• Manually verified via local package consumption in the cipollina-infrastructure stack with Mfa = Mfa.REQUIRED and MfaSecondFactor = new MfaSecondFactor { Otp = true, Sms = false }

Notes for Reviewers

Adding a property to the ICognitoUserPoolConstructProps interface is technically a breaking change for external implementors, though in practice all consumers use the concrete CognitoUserPoolConstructProps record. Treated as a minor bump accordingly.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 25292a01ef

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Bump major version for public interface change

This release is tagged as 2.3.0, but the same commit adds MfaSecondFactor to the public ICognitoUserPoolConstructProps interface, which is a source-breaking API change for any downstream code that implements that interface. Consumers that auto-accept minor updates can hit compile failures after upgrading, so this should be shipped as a major version bump (or the interface change avoided) to preserve semantic-version expectations.

Useful? React with 👍 / 👎.