fix(auth): show one terminal MFA expiry state

packages/auth/components/TwoFactorChallenge.wrn

@@ -51,6 +51,7 @@ component TwoFactorChallenge {
         <p data-error="_form" role="alert" class="m-0 hidden rounded-[var(--wrn-radius-sm)] bg-[color-mix(in_srgb,var(--wrn-color-danger)_10%,transparent)] p-3 text-sm text-[var(--wrn-color-danger)]"></p>
         <Button type="submit" label="{submitLabel}" variant="solid" color="{color}" size="{size}" fullWidth="true" />
       </form>
+      <p data-auth-mfa-expired role="alert" hidden class="wrn-auth-mfa-expired">Your sign-in request has expired. Sign in again to get a fresh verification request.</p>
       <nav class="wrn-auth-mfa-links" aria-label="Sign-in help">
         <a href='{signInHref}' data-auth-mfa-restart hidden>Back to sign in</a>
         <a href='{recoveryHref}'>Account recovery options</a>
@@ -58,6 +59,8 @@ component TwoFactorChallenge {
     </section>
   }
   style {
+    [data-auth-mfa-challenge][data-mfa-expired="true"] [data-auth-mfa-form] { display: none; }
+    .wrn-auth-mfa-expired { margin: 1.5rem 0 0; padding: 1rem; border: 1px solid var(--wrn-color-danger); border-radius: var(--wrn-radius-sm); background: color-mix(in srgb, var(--wrn-color-danger) 10%, transparent); color: var(--wrn-color-danger); font-size: 0.875rem; line-height: 1.5; }
     .wrn-auth-mfa-links { display: flex; flex-direction: column; align-items: flex-start; gap: 0.75rem; margin-top: 1.25rem; }
     .wrn-auth-mfa-links a { color: var(--wrn-color-primary); font-size: 0.875rem; }
     .wrn-auth-mfa-links a:hover { text-decoration: underline; }