Implement Entra Id password changes

[dmulder]

Summary
Right now if a new user hasn't yet set their password, and if they're logging in for the first time using an admin provided generated password, we are unable to handle the request, and recommend a DAG. We should simply handle this request and allow them to set the password.

Problem Statement
New users logging in with a generated password face difficulties as Himmelblau does not support in-session password changes. This limitation requires a workaround, such as using a separate device.

Proposed Solution
Implement password changes that can happen during the authentication flow. Most of the change will happen in libhimmelblau.

Benefits
Simplifies new user setup.

Alternatives Considered
None.

Additional Context
https://github.com/Gerenios/AADInternals/blob/b23a7845f6dc5ea8c57b10351421a4d00466cd90/AccessToken_utils.ps1#L2336