fix(security,calendar,task-board): close the 2FA enrollment bypass, and a batch of board, calendar and document fixes

CedarCopilot wants to merge 2 commits into staging from fix/skip-agent-runs-for-warmup-traffic