fix(pwa): reject malformed password hashes

[aiirvizionz]

Summary

• reject malformed stored scrypt password hashes before deriving a key
• require exactly scrypt$salt$hash with non-empty even-length hex fields
• add focused coverage for valid hashes and malformed values that previously could fail open

Test

• node --test apps/pwa/test/password-hash.test.mjs