<?php

declare(strict_types=1);

/**
 * Declares this app's own two-factor challenge route (base-relative). The
 * generated runtime's 2FA gate reads this so a half-authenticated request is
 * allowed to reach our community-branded challenge (forum/two-factor.php, routed
 * in public-routes.php) instead of the generic /generated/auth page. Absent =
 * the platform default is used, so this is a no-op for any app that omits it.
 */

return '/two-factor';
