Retrieves the two-factor authentication (2FA) methods configured for a user identified by their password reset token. Use this endpoint during the password reset flow to determine if 2FA verification is required. The token is obtained from the password reset email link. No authentication required.