feat: add original password verification for password change

[guqing]

What type of PR is this?

/kind feature
/area core
/milestone 2.15.x

What this PR does / why we need it:

用户修改密码功能增加原始密码确认步骤

Which issue(s) this PR fixes:

Fixes #2427

Does this PR introduce a user-facing change?

用户修改密码功能增加原始密码确认步骤

[codecov]

Codecov Report

Attention: Patch coverage is 86.84211% with 5 lines in your changes are missing coverage. Please review.

Project coverage is 56.53%. Comparing base (5fdf6c0) to head (267701d).
Report is 122 commits behind head on main.

Files	Patch %	Lines
...lo/app/core/extension/service/UserServiceImpl.java	50.00%	3 Missing and 1 partial ⚠️
...halo/app/core/extension/endpoint/UserEndpoint.java	96.66%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #5748      +/-   ##
============================================
- Coverage     56.91%   56.53%   -0.39%     
- Complexity     3319     3339      +20     
============================================
  Files           587      598      +11     
  Lines         18968    19630     +662     
  Branches       1401     1360      -41     
============================================
+ Hits          10795    11097     +302     
- Misses         7594     7966     +372     
+ Partials        579      567      -12     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[wan92hen]

修改密码后能否把当前 session 都清理掉，强制用户重新登录呢。

[ruibaby]

/lgtm

实际测试符合预期。

[ruibaby]

修改密码后能否把当前 session 都清理掉，强制用户重新登录呢。

我将单独提交一个 issue。

[JohnNiang]

/approve
It works very well.

[f2c-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JohnNiang

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [JohnNiang]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[JohnNiang]

修改密码后能否把当前 session 都清理掉，强制用户重新登录呢。

修改密码清理当前 Session 意义不大，应该清理掉当前用户所有的 Session。

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.3% Duplication on New Code

See analysis details on SonarCloud