Change min. password length from 8 to 12

[Gargron]

No description provided.

[ThisIsMissEm]

Looks good!

I did also look to see if this may effect the change password settings screen, and but it's fine as there is no password min/max length on the "current password" field. (if it were inheriting the min-length from the model, then we'd have to hardcode to 8 instead of 12, otherwise people wouldn't be able to change their passwords without first resetting them).

Looking at the tests, there doesn't seem to be a specific test (integration perhaps) that the current/new password form (/auth/edit) submits correctly (unless this is handle in devise in someway?)

[github-actions]

This pull request has merge conflicts that must be resolved before it can be merged.

[renchap]

This may be a good start, but I think this should be part of a wider initiative around how passwords are handled:

• Check the password against the HIBP API (through https://github.com/michaelbanfield/devise-pwned_password)
• Maybe use password-complexity rules, rather than just lenght
• Ensure that password controls in the various form have the correct HTML attributes, for example passwordrules (generator here) and autocomplete

[github-actions]

This pull request has resolved merge conflicts and is ready for review.