Enforce stronger password requirements for non-2FA users

[cotosso]

If 2FA is not enabled, users are required to use strong passwords, with a minimum length of 14 characters in certain situations to ensure adequate security.

Proposed Improvements

Enforce a minimum password length of 14 characters for non-2FA users.
Make the minimum password length configurable via CLI to allow flexibility for future requirements.

[gsanchietti]

A correct password validation for such usage scenario requires a new API inside the api-server and must be implemented after: #1023