[Access] Add FIDO2 as MFA type for Infrastructure SSH Applications

[waltja]

Summary

Updates Zero Trust documentation to add FIDO2 Key support for independent MFA on SSH infrastructure applications. Documents enrollment, SSH client configuration, authenticator selection, AAGUID restrictions, session behavior, and the distinction between FIDO2 Key, PIV, and browser WebAuthn Security keys.

Documentation checklist

• Is there a changelog entry (guidelines)? If you don't add one for something awesome and new (however small) — how will our customers find out? Changelogs are automatically posted to RSS feeds, the Discord, and X.
• The change adheres to the documentation style guide.

[cloudflare-docs-bot]

Review

💡 3 suggestions found in commit 90c7e3c.

Fix in your agent

Fix the following review findings in PR #32176 (https://github.com/cloudflare/cloudflare-docs/pull/32176).

Before making changes, review each finding and present a brief summary table:
- For each finding, state whether you agree, disagree, or need clarification
- If you disagree (e.g. the fix requires disproportionate effort for minimal benefit,
  or the finding is factually incorrect), explain why
- If you need clarification before deciding, ask those questions
- Then share your plan for which issues to tackle and in what order

After triaging, fix all legitimate findings. For any you decide to skip,
post a comment on this PR with the finding ID and your reasoning.

---

## Code Review

### Suggestions (1)

#### CR-2c4258f5f638 · Unused component import
- **File:** `src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx` line 17
- **Issue:** The added `Badge` import is not used anywhere in the file content.
- **Fix:** Remove the unused `Badge` import from the import block.

---

## Style Guide Review

### Suggestions (2)

#### SG-a03479a356fe · Headings must use sentence case
- **File:** `src/content/docs/cloudflare-one/access-controls/access-settings/independent-mfa.mdx` line 391
- **Issue:** Heading `### Enroll a FIDO2 Key for infrastructure apps` capitalizes `Key` unnecessarily.
- **Fix:** Change to `### Enroll a FIDO2 key for infrastructure apps`.

#### SG-a13f39d65c32 · Headings must use sentence case
- **File:** `src/content/docs/cloudflare-one/access-controls/access-settings/independent-mfa.mdx` line 404
- **Issue:** Heading `#### Configure your SSH client for FIDO2 Key` capitalizes `Key` unnecessarily.
- **Fix:** Change to `#### Configure your SSH client for a FIDO2 key`.

Code Review

This code review is in beta and may not always be helpful — use your judgment.

Suggestions (1)

File	Issue
cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx line 17	Unused component import — The added Badge import is not used anywhere in the file content. Fix: Remove the unused Badge import from the import block.

Conventions

_{No convention issues found.}

Style Guide Review

Suggestions (2)

File	Issue
cloudflare-one/access-controls/access-settings/independent-mfa.mdx line 391	Headings must use sentence case — Heading ### Enroll a FIDO2 Key for infrastructure apps capitalizes Key unnecessarily. Fix: Change to ### Enroll a FIDO2 key for infrastructure apps.
cloudflare-one/access-controls/access-settings/independent-mfa.mdx line 404	Headings must use sentence case — Heading #### Configure your SSH client for FIDO2 Key capitalizes Key unnecessarily. Fix: Change to #### Configure your SSH client for a FIDO2 key.

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command	Description
/review	Runs a review now. Incremental if a prior review exists, full if not.
/full-review	Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/ignore-review-limit	Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.
/disable-auto-review	Stops automatic reviews from triggering on future pushes to this PR. Codeowners can still run /review or /full-review manually.
/rebase	Rebases the PR branch against production. On conflict, attempts to resolve automatically using AI. Stops with an explanation if confidence is not high enough.