Revert "feat(node-type-registry): GuardStepUp accepts only fresh_auth, not password_or_mfa"

[pyramation]

Reverts #1870

[tenki-reviewer]

Review complete. No blocking issues — approved ✅; 1 nitpick below.

🧹 Nitpicks (1) — 🟢 1 low

• 🟢 Add password_or_mfa alias to DataLock.step_up_type (data-lock.ts:46) — The PR re-accepts the legacy password_or_mfa spelling of fresh_auth on GuardStepUp (packages/node-type-registry/src/guard/step-up.ts:23), but the sibling DataLock definition's step_up_type enum (packages/node-type-registry/src/data/data-lock.ts:48) still allows only password, mfa, and fresh_auth.

---

This PR extends the step-up verification enum in packages/node-type-registry/src/guard/step-up.ts with a password_or_mfa value as an alias for the existing fresh_auth option.

Files	Change
packages/node-type-registry/src/guard/step-up.ts	Adds password_or_mfa to the step_up_type enum alongside fresh_auth.

_{Reviewed commit: 83a996c}