hermes - 💡(How to fix) Fix Add a change user password button to the user security settings menu

Feature Description

Add a Change password button/action to the user security settings menu.

Motivation

Users should be able to update their own password from the security settings area without needing an administrator flow, external account portal, or manual backend/API intervention. Keeping this action in the security settings menu makes the account-management path discoverable and matches common user expectations.

Proposed Solution

• Add a clearly labeled Change password button in the user security settings menu.
• Open a modal or dedicated form that asks for:
  • Current password
  • New password
  • Confirm new password
• Validate password requirements client-side where possible and enforce them server-side.
• Require current-password verification before changing the password.
• Show success/error feedback and avoid logging or exposing password values.
• If the product uses an external/OAuth identity provider for the active user, route the button to the correct provider-managed password-change flow or show a clear explanation when local password changes are unavailable.

Acceptance Criteria

• A signed-in user can find a Change password action from the user security settings menu.
• Submitting valid current/new password values updates the password successfully.
• Invalid current passwords, mismatched confirmations, and weak/invalid new passwords produce clear errors.
• Password fields are masked and never appear in logs, telemetry, URLs, or issue/debug output.
• The UI handles identity-provider-managed accounts gracefully.