fix: address CI failures for form validation tests

- Add tests/ui_tests/*password*.js to whitelist safe filename patterns
- Add blur() call before checking pattern validity to ensure browser
  updates validation state properly

.github/scripts/file-whitelist-check.sh

@@ -151,6 +151,7 @@ SAFE_FILENAME_PATTERNS=(
 "\.secrets\.baseline$"
 ".*session_passwords\.py$"
 ".*change_password\.html$"
+"tests/ui_tests/.*password.*\.js$"
 )
 
 # Check if filename looks suspicious