Send MFA codes to engineers before deploy windows

Your auth webhooks deliver one-time codes that sit unprocessed, causing blocked developer access. Recipients get verification emails so engineers regain access before the next deploy window.