Enforces secure password handling whenever an agent touches passwords anywhere — hashing, salting, peppering, storage, verification, reset flows, login, signup, change-password, and frontend password fields.
