This has dual purpose:

* if user has both WebAuthn and TOTP set up, they can choose
  between the two as equal options.
* we initiate WebAuthn flow only after an explicit user action
  (button press). This may help with authentication failures
  on recent MacOS, iOS and iPadOS versions [1]

[1] https://support.yubico.com/hc/en-us/articles/360022004600-No-reaction-when-using-WebAuthn-on-macOS-iOS-and-iPadOS

For example, if we need to use a custom From: address,
we can now do:

    m = make_message("template-name", recipient, ctx)
    m.from_email = "...."  # customize here
    send(m)

- add optional `from_email` argument
- add test cases that exercise the retry loop

Fixes: #354

Fixes: #323

Fixes: #539

It is obsoleted by Profile.reports

This is to help troubleshoot 2FA issues without
running manual SQL queries.

Fixes: #536