Password must be at least 8 characters and include:
• One uppercase letter (A–Z)
• One lowercase letter (a–z)
• One number (0–9)
• One special character (e.g. !@#$%)