Stage 6 v6 - legacy password auto-hash login

This package uses versioned authentication files to avoid stale PHP opcode caches.
On a successful legacy plaintext login, the password is converted to password_hash()
then the login proceeds. Existing password hashes are verified normally.

No SQL import is required.
