WIP Logins: breach alert dismissal support

[jo]

This migrates the database to version 3.

New Login properties:

• time_last_potentially_valnerable_password_set
• time_last_breach_alert_dismissed

Additional LoginStore API methods:

• is_potentially_vulnerable_password
• set_potentially_vulnerable_password
• reset_all_potentially_vulnerable_passwords
• is_breach_alert_dismissed
• record_breach_alert_dismissal

Pull Request checklist

• Breaking changes: This PR follows our breaking change policy
  • [x] This PR follows the breaking change policy:
    • This PR has no breaking API changes, or
    • There are corresponding PRs for our consumer applications that resolve the breaking changes and have been approved
• [ ] Quality: This PR builds and tests run cleanly
  • Note:
    • For changes that need extra cross-platform testing, consider adding [ci full] to the PR title.
    • If this pull request includes a breaking change, consider cutting a new release after merging.
• [x] Tests: This PR includes thorough tests or an explanation of why it does not
• [x] Changelog: This PR includes a changelog entry in CHANGELOG.md or an explanation of why it does not need one
  • Any breaking changes to Swift or Kotlin binding APIs are noted explicitly
• [x] Dependencies: This PR follows our dependency management guidelines
  • Any new dependencies are accompanied by a summary of the due diligence applied in selecting them.