fix: use correct Logto endpoint for password updates

PATCH /api/users/{id}/password, not /api/users/{id}. The general user
update endpoint rejected the password field with 422.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/main/java/net/siegeln/cameleer/saas/identity/LogtoManagementClient.java

@@ -402,7 +402,7 @@ public class LogtoManagementClient {
     public void updateUserPassword(String userId, String newPassword) {
         if (!isAvailable()) throw new IllegalStateException("Logto not configured");
         restClient.patch()
-            .uri(config.getLogtoEndpoint() + "/api/users/" + userId)
+            .uri(config.getLogtoEndpoint() + "/api/users/" + userId + "/password")
             .header("Authorization", "Bearer " + getAccessToken())
             .contentType(MediaType.APPLICATION_JSON)
             .body(Map.of("password", newPassword))