Password Changed

Record that the caller changed or reset their password.

Clerk owns the credential end to end for every password flow (sign-in, change-password, forgot-password) — this endpoint never receives a password, current or new, and never could: nothing here verifies or stores one. It exists purely so a password change leaves an audit trail, the same way auth.logout does.