Use the NIST publication for better password validation

@agentultra shared [__an interesting PDF of the NIST__](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf) about how to go about handling and enforcing passwords (memorized secrets) and it has some interesting guidelines that make a lot of sense that could be implemented in the `Data.Password.Validate` module. (I've only really looked at a bit of chapter 5.1, but there're some good things in there)

I'd like to keep this issue open for discussion and coordination when someone wants to pick this up.

Start by reading the NIST Special Publication 800-63B PDF, especially chapter 5.1, and inspect the Data.Password.Validate module. Clarify which memorized-secret guidelines are in scope and agree on acceptance criteria before changing anything; done should mean the selected validation behavior is implemented and verified.

Written by the indexing model from the issue text.