Opt-in for MFA requirement

[tagliala]

Make the gem more secure by requiring that all privileged operations by any of the owners require OTP.

Ref: https://guides.rubygems.org/mfa-requirement-opt-in/

[tagliala]

Hi,

A little bit of background about this change.

I'm proposing this change for some gems that I may use in my stack.

• MFA is already been used by popular Ruby gems like rails, puma, nokogiri, dalli, and recently has been accepted by sidekiq
• There is a RuboCop cop checking for the MFA in the gemfile
• No SMS or phone numbers are required for MFA, it works with authentication apps
• MFA is already mandatory for top 100 gems and maintainers of popular gems

References:

• https://guides.rubygems.org/setting-up-multifactor-authentication/
• https://blog.rubygems.org/2022/08/15/requiring-mfa-on-popular-gems.html

[igorkasyanchuk]

thanks