How can I sign up a user using BOTH phone sms verification and email?

you might need to do that by creating a custom table which will set the boolean values such as isPhoneVerified, isEmailVerified. and while signing up, use cascading sign up, first confirm email and then set isEmailVerified to true, then redirect to phone verification and set isPhoneVerified to true. There might be some better solutions.

If you know Go, you might consider doing a pull request for the GoTrue server to allow both: https://github.com/supabase/gotrue/blob/master/api/signup.go#L51