Production hardening: password complexity, token refresh, network resilience

Password complexity: real-time validation UI on register, onboarding, and reset screens
  (uppercase, lowercase, digit, min 8 chars) — Compose + iOS Swift
iOS privacy descriptions: camera, photo library, photo save usage strings
Token refresh: Ktor interceptor catches 401 "token_expired", refreshes, retries
Retry with backoff: 3 retries on 5xx/IO errors, exponential delay (1s base, 10s max)
Gzip: ContentEncoding plugin on all platform HTTP clients
Request timeouts: 30s request, 10s connect, 30s socket
Validation rules: split passwordMissingLetter into uppercase/lowercase (iOS Swift)
Test fixes: corrected import paths in 5 existing test files
New tests: HTTP client retry/refresh (9), validation rules

composeApp/src/iosMain/kotlin/com/tt/honeyDue/network/ApiClient.ios.kt

@@ -52,5 +52,8 @@ actual fun createHttpClient(): HttpClient {
                 setAllowsCellularAccess(true)
             }
         }
+
+        // Shared plugins: gzip, retry with backoff, timeouts, token refresh
+        installCommonPlugins()
     }
 }