CLDC-4060: Reset 2FA when user is deactivated (#3120)

allows CORE to always reset a user by deactivating/reactivating them

app/models/user.rb

@@ -160,6 +160,7 @@ class User < ApplicationRecord
       initial_confirmation_sent: false,
       reactivate_with_organisation:,
       unconfirmed_email: nil,
+      second_factor_attempts_count: 0,
     )
   end