Testnizer v1.5.2

v1.5.2

Password reset now works for domain (Active Directory) accounts on Windows.

• Password reset / system-password verification (issue #82): on Windows the
  check only ever validated local accounts — for a domain (Active
  Directory) account the correct system password was rejected with "Incorrect
  system password", and a machine away from the corporate network/VPN could
  not validate at all. The verification chain now covers AD accounts: the
  account's real domain is tried with NETWORK, INTERACTIVE and
  CACHED_INTERACTIVE logons — the last validates against the same local
  credential cache the Windows lock screen uses when no domain controller is
  reachable — plus a UPN (user@domain) attempt, before the existing
  fallbacks. If verification still fails on a domain-joined machine, the error
  now says the domain controller may be unreachable (connect to the corporate
  network or VPN) instead of only claiming the password is wrong.

Tests: the Windows verification program is now generated by an exported,
unit-tested builder — the suite pins the whole attempt chain (local-first
order, the three domain logon types, the domain-joined guard, the UPN
fallback and the distinct domain-failure marker) so a refactor can't silently
drop an AD path again. The AD execution itself is environment-specific;
verification on a real domain-joined machine is requested from the reporter
on issue #82.