fix: account linking with 2FA

[hperl]

This fixes some edge cases with OIDC account linking for accounts with 2FA enabled.

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  [email protected]) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 56.41026% with 34 lines in your changes missing coverage. Please review.

Project coverage is 78.46%. Comparing base (234b6f2) to head (e17557a).

Files with missing lines	Patch %	Lines
selfservice/flow/login/hook.go	46.66%	13 Missing and 3 partials ⚠️
selfservice/strategy/oidc/strategy_settings.go	67.74%	6 Missing and 4 partials ⚠️
selfservice/flow/login/handler.go	30.00%	7 Missing ⚠️
selfservice/flow/registration/hook.go	85.71%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4188      +/-   ##
==========================================
- Coverage   78.84%   78.46%   -0.38%     
==========================================
  Files         380      380              
  Lines       27577    27176     -401     
==========================================
- Hits        21743    21325     -418     
- Misses       4204     4224      +20     
+ Partials     1630     1627       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[aeneasr]

Just two minor things otherwise LGTM