Ask for new password on initial login in dev

What does this MR do?

We provide a default password for the root user when setting up the GDK in the development environment.

To improve security, we should ask the user to reset their password on initial login. We can do this by setting the password expiry.

Note, AFAIK we can't enforce the user to choose a new password that is different from the existing password. Issue for that here https://gitlab.com/gitlab-org/gitlab/-/issues/15343.

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• Documentation (if required)
• Code review guidelines
• Merge request performance guidelines
• Style guides
• Database guides
• Separation of EE specific content