LG-14261 Add attempt count to mfa setup auth events

[kevinsmaster5]

🎫 Ticket

Link to the relevant ticket:
LG-14261

🛠 Summary of changes

Adds a session token to track number of attempts when setting up an mfa type.
Total sum of attempts gets passed to analytics_events.
Backup codes are excluded since during setup they're added instantly.

📜 Testing Plan

Checklist of steps to confirm the changes.

• In a separate console run make watch_events
• http://localhost:3000 with existing or new account add MFA.
• Observe in the watch_events feed 'Multi-Factor Authentication Setup' that a predictable value for
  properties > event_properties > mfa_attempts is registered

Attempt count will increment by failing and retrying to add mfa for example:

• Webauthn (Face|Touch or security key) clicking cancel at the browser dialog before completing setup
• PIV test screen select a failing condition
• SMS/Voice enter (change) supplied auth code
• Auth App enter wrong auth code

👀 Screenshots

[kevinsmaster5]

Taking a look at second_factor_attempts_count to see if that might take the place of creating a session token.

[kevinsmaster5]

Taking a look at second_factor_attempts_count to see if that might take the place of creating a session token.

seems to only work for OTP.

[mdiarra3]

Looks good and seems to work locally, but wondering if theres a way for us to push this out to a helper or concern for the verification controllers.