Remove scenarios that require MFA being turned off or optional (#48509)

We no longer support this option.

Also: update the wording in navigation section, since we're no longer talking just about the top bar here.

.github/ISSUE_TEMPLATE/webtestplan.md

@@ -28,23 +28,21 @@ There should be a cluster dropdown for:
 - [ ] web terminal console view (can get to it by ssh into a node, or route to: `/web/cluster/<cluster-name>/console/nodes`)
 - [ ] Can edit and delete a trusted cluster
 
-### Top Bar Nav
+### Navigation
 
 - [ ] Contains `Resources` (unified resources), `Access Management`, `Access Requests`, `Active Sessions`, `Notification Bell` and `user settings menu`
 
 ### User Settings Menu
 
 - Verify that clicking on the username, user menu dropdown renders:
   - [ ] Account Settings (actions should require re-authn with a mfa device)
-    - [ ] Verify adding very first device or passkey works without requiring re-authentication
     - [ ] Can CRUD passkeys (passwordless)
       - [ ] Can login with added passkey
     - [ ] Can change passwords
       - [ ] Can login with changed password
       - [ ] Verify that account is locked after several unsuccessful change password attempts
     - [ ] Can CRUD MFA devices (test both otp + hardware key)
       - [ ] Can login with added device
-    - [ ] Verify `second_factor` set to `off` disables adding devices
     - Recovery codes
       - [ ] Cloud only: can read and generate new recovery codes
   - [ ] Help & Support