- New ProfileController with editPassword/updatePassword actions that verify
the current password and require a confirmed new password of at least 8 chars
- Adds /profile/password GET/PUT routes behind auth middleware
- Adds profile.password blade view with form validation error display
- Links "Change Password" in the app layout sidebar