feat: implement user password update functionality with validation

[Junjiequan]

Description

Add endpoints for users to change their own password and for admins to change other users’ passwords, with input validation and auth-strategy checks.

Motivation

Users need a secure way to rotate their password; admins need to manage local-only accounts. Enforces that only “local” users can have their passwords updated.

Changes:

• Added UpdateUserPasswordDto and AdminUpdateUserPasswordDto DTOs
• Implemented updateOwnPassword (POST /users/password) and updateUserPassword (PATCH /users/:id/password) in UsersController
• Validate current password, enforce authStrategy === "local", and return standardized response
• Extended UsersService to perform password hash/update logic

Tests included

• Included for each change/fix?
• Passing?

Documentation

• swagger documentation updated (required for API changes)
• official documentation updated

official documentation info

[Copilot]

Pull Request Overview

This PR implements user password update functionality with validation, adding new endpoints for users to update their own password and enabling administrators to update user passwords. Key changes include additions to the user service for password updates, controller endpoints for both user and admin password updates, and corresponding test cases and DTOs.

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
test/Users.js	Adds tests for changing password scenarios, including validations for incorrect passwords and auth strategy restrictions.
src/users/users.service.ts	Introduces a new updateUserPassword method to hash and update the password in the database.
src/users/users.service.spec.ts	Updates user settings mocks to include required properties for testing.
src/users/users.controller.ts	Adds endpoints for local users to change their own passwords and for admins to change user passwords with proper authorization.
src/users/dto/update-user-password.dto.ts	Defines the DTOs for user and admin password update requests.
src/datasets/datasets.controller.ts	Cleans up unused imports by removing deprecated type references.
src/common/types.ts	Adds password update response type for standardizing API responses.

Comments suppressed due to low confidence (1)

src/users/users.controller.ts:291

• [nitpick] Consider revising the error message for clarity, for example: "Only local users' passwords can be changed by admin".

"Only local users passwords can be changed by admin",

[nitrosx]

Just a couple of question/comments

[nitrosx]

Two minor changes on tests