Clear require_password_change after password reset (follow-up to #1494)

[aarshe22]

Summary

• After a successful email password reset (and any successful setNewPassword()), clear the require_password_change user meta so clients are not forced back to clients-edit.php on every login.
• Follow-up to the permission fix from Fix 403 error on first new client login requiring password change: replace obsolete edit_own_client_profile projectsend#1494 / Incorrect permission name specified in client-edit.php breaks "password change required" projectsend#1476 (already on legacy develop as edit_self_account).
• Tracking issue: require_password_change not cleared after email password reset (follow-up to #1494 / #1476) #168

Fixes #168

Problem

1. Admin creates a client with Require password change after first login.
2. Client uses the email reset link and successfully sets a new password.
3. require_password_change meta remains true.
4. On login, password_change_required() still redirects to clients-edit.php?id=<id>.
5. Even with the #1494 permission fix applied, users who already reset via email never clear the flag unless they save the profile form.

Changes

• includes/Classes/PasswordReset.php — delete the meta after a successful reset.
• includes/Classes/Users.php — also clear it inside setNewPassword() so all callers that set a password satisfy the requirement.

Test plan

• Create a client with Require password change after first login enabled
• Request a password reset email and complete the reset with a new password
• Confirm require_password_change meta is removed for that user
• Log in as the client and confirm redirect goes to the file list (not clients-edit.php)
• Confirm a client without the flag is unchanged
• Confirm creating a new client with the flag still sets the meta (create path does not use setNewPassword() before saving meta)

[aarshe22]

Opened tracking issue for this fix.