Record device password changes for IT before audits

Your device password change webhooks land untracked, causing gaps in compliance reporting and missing evidence for audits. Reduce compliance risk and ensure audit-ready change logs before the next reporting run.