Function validate_password_strength 

pub fn validate_password_strength(password: &str) -> Result<(), ValidationError>

Validate that a password meets ColdStar’s minimum strength requirements.

Rules: at least 12 characters, at least one uppercase, one lowercase, one digit, and not in a common-password blocklist.