from svc_infra.api.fastapi.auth.policy import DefaultAuthPolicyDefault authentication policy implementation. Checks user-level MFA settings and provides no-op hooks for login and challenge events. Override this class to customize MFA logic, audit logging, or add tenant/global policy rules.
settings: Application settings for auth configuration.