Reset Password from CLI

[bbengfort]

Scope of changes

Allows reset password from CLI so I can quickly change Ryan's password.

Type of change

• new feature
• bug fix
• documentation
• testing
• technical debt
• other (describe)

Acceptance criteria

This PR will be merged without review.

Definition of Done

• I have manually tested the change running it locally (having rebuilt all containers) or via unit tests
• I have added unit and/or integration tests that cover my changes
• I have added new test fixtures as needed to support added tests
• I have updated the dependencies list if necessary (including updating yarn.lock and/or go.sum)

In general, the fix is to ensure that passwords are not printed or logged in clear text. For password reset flows, you typically either (a) send the password or reset link via a secure out‑of‑band channel (email, etc.) handled elsewhere, or (b) instruct the administrator that a password has been set without echoing the value. For a CLI admin command, the least invasive change that preserves behavior is to avoid including the password itself in the fmt.Printf call, while still confirming the operation and, if needed, indicating how to obtain or deliver the password via another mechanism.

Here, the single best change without altering the functional reset logic is to modify the if c.Bool("generate") { ... } branch so it no longer includes %s with password in the output. For example, we can print a generic confirmation like: fmt.Printf("password for %q has been reset and generated\n", user.Email) or similar, which still informs the operator that a new password has been created, but does not reveal it in logs. No new imports or helpers are required; the change is isolated to the fmt.Printf line at 288 in cmd/quarterdeck/main.go.

Specifically:

• In cmd/quarterdeck/main.go, in resetPassword, replace line 288 (fmt.Printf("new password for %q is: %s\n", user.Email, password)) with a message that does not include password. The surrounding structure and other branches remain unchanged.
• No additional methods, structs, or external packages are necessary.