Initial import: eCW Charge Validation bot and results Portal

Snapshot of the working project as of 2026-10-23 (local 2d4d4fc), one
commit with no earlier history: the tracked files were de-identified
first (synthetic claim ids and patient data only; see Context.md
section 7). Credentials, run logs, screenshots, claim reports and client
workbooks are gitignored and not included.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/templates/password.html

@@ -0,0 +1,23 @@
+{% extends "base.html" %}
+{% block title %}Change password{% endblock %}
+{% block style %}
+  .pw { max-width: 420px; }
+  .pw label { display: block; margin: 0 0 12px; font-weight: 600; }
+  .pw input { display: block; width: 100%; margin-top: 4px; }
+{% endblock %}
+{% block content %}
+<div class="pw">
+  <h1>Change password</h1>
+  {% if user.must_change %}<p class="sub">Choose your own password before
+    going on (an Admin set the one you signed in with).</p>
+  {% else %}<p class="sub">At least 10 characters, not your username.</p>{% endif %}
+  {% if error %}<div class="msg bad" role="alert">{{ error }}</div>{% endif %}
+  <form class="card" method="post" action="/account/password" autocomplete="off">
+    <input type="hidden" name="token" value="{{ run_token }}">
+    <label>Current password <input name="current" type="password" autocomplete="current-password" required></label>
+    <label>New password <input name="new" type="password" autocomplete="new-password" minlength="10" required></label>
+    <label>New password again <input name="confirm" type="password" autocomplete="new-password" minlength="10" required></label>
+    <button type="submit">Change password</button>
+  </form>
+</div>
+{% endblock %}