Some changes were made:

- Upgrade Wizard works
- Visibility on RedirectHandler is sorted out
- TreeUidListProvider is removed - cObject does everything already, less dependencies
- PasswordChangeEvent is actually executed now (and works!)
- RedirectConfiguration now has a factory
- Do not use ConnectionPool as dependency as it contains state
- Most "final" and "private" were put back to "protected" (as the rest of core) - except events
- Additional hmac check in Repository
- Add lifetime validation of hash in changePassword action as well

Resolves: #89828
Related: #84262
Releases: master
Change-Id: I813a2fc86c8e4f61fd923467aa761246187af901
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/62516


Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Alexander Schnitzler <review.typo3.org@alexanderschnitzler.de>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Alexander Schnitzler <review.typo3.org@alexanderschnitzler.de>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>