Implementation of best practice client-side password handling

This marks the first release of passwords-sqnfa-web and for sqnfa!

The version contains client-side password handling for:

• Minimum length
• Black lists with words, email and regular expressions
• Connection to haveibeenpwned.com
• Hashing using SHA512/432
• Hashing using Bcrypt
• Extendable using either custom sync or custom async handlers

Relevant blog posts behind black lists and haveibeenpwned.com:

• Do not wordle your passwords
• What are doomed passwords?