fix: hold an account to the password lifetime policy when it is edited

[blaipr]

A password preset marked fixed sets a maximum lifetime, and checkPasswordPreset() clamps passDateChange to time() + expireTime. It is called where a password is being set — create, copy, edit-pass, on both the web and the API — and nowhere else.

Editing an account writes passDateChange just the same, from a field the form offers (password_date_expire in account.inc and account_bulkedit.inc; expireDate on the API). None of those paths clamped it:

• web ACCOUNT_EDIT — create the account under a ninety-day policy, edit it a moment later to expire in a decade;
• web ACCOUNTMGR_BULK_EDIT — the same, to a whole selection at once;
• API account/edit — the same, as expireDate.

Anyone with edit rights on an account could exempt it from a rotation policy the administrator had made mandatory.

Why not just call the existing check

Because it would refuse every edit. checkPasswordPreset() also runs PasswordValidator::validate(), which measures mb_strlen($password) against the preset's required length and throws — and an edit legitimately carries no password. While a fixed preset existed, editing any account would have failed.

So the clamp becomes its own method, checkPasswordExpiry(), and the edit paths call that. checkPasswordPreset() delegates to the same clamp, so the paths that already enforced it are untouched — its twelve existing tests pass unchanged.

expects(never())->method('validate') in the new test is holding that distinction, and it is as much the point as the clamp:

removing the clamp        -> Failed asserting that 1820534228 is … less than 1788998228
validating on this path   -> PasswordValidator::validate(…, ''): was not expected to be called

Three things the full suite caught

All mine, all from the new call site: two PHPStan complaints (@throws naming classes in the wrong namespace, and the widened AccountDto reaching AccountService::update() which wants AccountUpdateDto — fixed with @template T of AccountDto), and AccountFormTest, whose mocked preset service returned a stub for the new call and broke the form's typed property.

3991 unit + 976 integration pass; PHPStan level 6 on src and PHPCS clean.