improve: password validation too basic

[ajianaz]

enhancement,priority:low~~## Problem
Only checks length >= 8. No complexity requirements.

Fix

Add optional complexity rules (uppercase, digit, special char).