bug: impossible to remove a password when configured

[Rodaviva29]

Summary

When we set a Password for a Link, when we try to remove it, the edit is successful, but the change doesn't come to effect.

[github-actions]

👋 I've investigated this issue and here's what I found:

🔍 Investigation:

• No duplicates found - I searched through all existing issues and couldn't find any related bug reports about removing password protection from links
• No documentation - There's no documentation about password-protected links in README.md or the docs/ directory

Root cause identified in code:
The issue is in shared/schemas/link.ts:28 where the password field is defined as:
password: z.string().trim().min(1).max(128).optional()

This schema makes it impossible to remove a password because:

1. An empty string fails validation (due to .min(1))
2. Omitting the field keeps the old password (the edit API merges existing link with new data at server/api/link/edit.put.ts:54-60)

Suggested fix:
Modify the schema to allow null for removing password:
password: z.string().trim().min(1).max(128).nullable()
Or add a separate flag like clearPassword: z.boolean() to explicitly indicate password removal.

This is a legitimate bug that would need a code fix. Hope this helps with debugging!