Mike,
The process you describe is designed precisely to avoid "Robots" from getting access to a system. Normally, test credentials are created to bypass this process in test/staging environments. However, if you want to run tests in Secure/Production type environments, then we would need to create a script that would login to the email get the token, and use it in the test script.
If you want to use Google Authenticator then you would need the following:
1. Mobile feature in Subject7
2. Update Cloud Executors to run Mobile Simulators to install/configure the Google authenticator needed for each test login.
3. Use Subject7 Mobile feature to read the Passcode and feed it into the script