Update user password after secure webhook token validation

You get webhook alerts about risky user accounts but manual password resets are slow and inconsistent. Reset passwords automatically so IT restores secure access within minutes.