feat: make user verification configurable, preferred as default

[lfleischmann]

Description

• make user verification configurable
• set preferred as default value

Note that setting a user_verification value does not seem to have any impact on registration because we register credentials as resident keys per default and browsers then seem to automatically require verification for that.

Closes #654

[sonatype-lift]

Sonatype Lift is retiring

Sonatype Lift will be retiring on Sep 12, 2023, with its analysis stopping on Aug 12, 2023. We understand that this news may come as a disappointment, and Sonatype is committed to helping you transition off it seamlessly. If you’d like to retain your data, please export your issues from the web console.
We are extremely grateful and thank you for your support over the years.

📖 Read about the impacts and timeline