[TASK] Mitigate browser "spell jacking" in form elements

Having manually(!) enabled "enhanced spell checking" in browsers,
can lead to scenarios where password data is sent to remote services
which actually take care of the spell checking.

see https://www.otto-js.com/news/article/chrome-and-edge-enhanced-spellcheck-features-expose-pii-even-your-passwords

Since this issue is caused by browsers and the determination of
"confidentiality" is fuzzy here, this issue is handled in public.

Following changes have been applied:
+ forms dealing mainly with credentials, as well as all forms in
  ext:install  have been adjusted to `<form ... spellcheck="false">`
+ other password form elements, including TCA type `password` have
  been adjusted to `<input type="password" ... spellcheck="false">`

Resolves: #98492
Releases: main, 11.5
Change-Id: I32cab686040e09fb491a93187a3c1b196e7cf1bf
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/75946


Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>