feat(security): implement SOC 2 & ISO 27001 audit logging, password policy, and session timeout

auth/reset-password.php

@@ -37,8 +37,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && $resetRecord) {
 
     if (empty($password)) {
         $error = "Vul een nieuw wachtwoord in.";
-    } elseif (strlen($password) < 8) {
-        $error = "Het wachtwoord moet minimaal 8 tekens lang zijn.";
+    } elseif (($pwErr = fociz_validate_password($password)) !== null) {
+        $error = $pwErr;
     } elseif ($password !== $confirmPassword) {
         $error = "De wachtwoorden komen niet overeen.";
     } else {
@@ -62,6 +62,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && $resetRecord) {
             $db->commit();
             $success = true;
 
+            fociz_log_audit(null, 'PASSWORD_RESET_COMPLETED', 'user', null, ['email' => $resetRecord['user_email']], 'SUCCESS', $resetRecord['user_email']);
+
         } catch (Throwable $e) {
             if ($db->inTransaction()) $db->rollBack();
             error_log("Fout bij resetten wachtwoord: " . $e->getMessage());