Allow users to choose their preferred authenticator method by prioritizing Passkeys/Security Keys and the Authenticator App over Recovery Codes as the default 2FA methods.

### Problem Statement

Currently, users who have set up both an authenticator app (such as Microsoft Authenticator) and passkeys/security keys (e.g., U2F keys) are often prompted to use their authenticator app or recovery code by default when signing in, which can be an inconvenient extra step.

### Solution Brainstorm

Allow flexibility to choose Passkeys/Security Keys as the Default 2FA Method: Users who have set up passkeys/security keys should be able to set them as the primary 2FA method, making them the default for login.

### Product Area

Sign In

No files or tests are named. Start by reviewing the Sign In 2FA flow and how passkeys/security keys, authenticator apps, and recovery codes are currently selected. Done means users with passkeys or security keys can choose them as the default method instead of being prompted for an authenticator app or recovery code.

Written by the indexing model from the issue text.