Pluggable password policies
This fixes #2973 (closed) by providing a new API to easily create password policy plugins
A documentation is provided, the HIBP plugin can also be used as a demo because it uses most features of the new API and is no longer reference by the core Portal code any more