[DRE-maint] Bug#1084360: ruby-devise-two-factor FTBFS

[Rebecca N. Palmer]

This is caused by ruby-attr-encrypted being updated to 4.x.  (It was 
known at the time that this would break ruby-devise-two-factor, but it 
was needed for a new version of ruby-saml that contained a security fix, 
#1081560.)

This is fixed upstream in 4.1.1:
https://github.com/devise-two-factor/devise-two-factor/pull/237

However, this version (which has been in Salsa for some months) passes 
this test, but then reports failure for no obvious reason:
https://salsa.debian.org/ruby-team/ruby-devise-two-factor/-/jobs/5110357