[codex] Fix generated password validation

[karilint]

Summary

• Confirmed Admin: User rights management #730 is still relevant in the narrowed form from the issue comment: rights management works, but setting/generated passwords can fail.
• Align backend and frontend password validation with the documented/generated allowed characters by accepting ^ and ?.
• Add backend unit coverage for generated-password symbols.

Root Cause / Context

The admin user modal can generate passwords using ^ and ?, and both frontend/backend messages said those characters were allowed. The actual validation regex on both sides omitted them, so generated or manually-set admin passwords containing those characters were rejected.

Validation

• cd backend && npx jest src/unit-tests/validatePassword.test.ts --runInBand --config jest-config.js
• npm run lint:backend
• npm run lint:frontend
• npm run tsc:backend
• npm run tsc:frontend
• Commit hook also ran root npm run lint and root npm run tsc successfully.

Closes #730

[Copilot]

Pull request overview

This PR fixes a mismatch between generated/documented password characters and the actual validation logic by updating both frontend and backend validators to accept ^ and ?, and adds backend unit test coverage for those symbols.

Changes:

• Expand the allowed-character regex in both frontend and backend password validators to include ^ and ?.
• Add backend unit tests verifying passwords containing ^ and ? are accepted.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
frontend/src/hooks/usePasswordValidation.ts	Updates the client-side validation regex to accept ^ and ? to match the documented allowed set.
backend/src/utils/validatePassword.ts	Updates server-side validation regex (and keeps the error text aligned) to accept ^ and ?.
backend/src/unit-tests/validatePassword.test.ts	Adds unit tests to ensure passwords containing ^ and ? validate successfully.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.