[backend] add password strength validation to signup

[polter-dev]

Currently password: z.string() accepts any string. Add zod validation for minimum length and complexity requirements.