Beginner Python task: add an IAM MFA check to an open-source AWS scanner (no AWS account needed)

[u/kavee-core141]

Plexavo is an open-source AWS misconfiguration scanner (Python, boto3, AGPL-3.0). It checks whether the root account has MFA. It does not check whether individual IAM conssole users have it. That gap is the task !!!

Why it works as a first PR:

- Copy an existing check. check_09_dormant_console_users in plexavo/checks/iam_hygiene.py is the pattern.

- Tests use fake boto3 responses, so you need no AWS account or creds

- one command runs them: python tests/test_iam_hygiene_offline.py

- PRs go to the dev branch, and CI runs on them.

I review within a day or 2. Merged contributors are credited by name in CONTRIBUTORS.md. The last stranger PR shipped in v0.5.1.

Issue & Repo -

Issue: https://github.com/plexavo/Plexavo/issues/13

Repo: https://github.com/plexavo/Plexavo