the following changes have been pushed to bugzilla.mozilla.org:

• [1207926] change treeherder@bots.tld to orangefactor@bots.tld
• [1204683] Add whoami endpoint
• [1208135] security not being mailed when bugs change core-security-release state
• [1199090] add printable recovery 2fa codes
• [1204623] timestamp on flags should reference the latest updated activity, not the first
• [1209745] Update get_permissions.html.tmpl to reflect new self-canconfirm process