Support password rules?

[woodruffw]

Apple has a small "password rules" DSL that can be used to specify password generation constraints for specific sites.

They also maintain a "quirks" collection for sites that have password format restrictions: https://github.com/apple/password-manager-resources/blob/main/quirks/password-rules.json

It might be interesting to try and integrate this into kbs2: if a record label looks like a domain name and matches one with a known restriction, the password generation backend should attempt to generate a compatible password.

1Password has also already written a parser for it in Rust, so that part is done: https://github.com/1Password/password-rules-parser