Create better experience when adding users - user's password

[westonplatter]

@Gowiem ran into an issue adding a new user to our workspace.

His workflow was,

1. Add user without password
2. Merged PR + ran terraform via the masterpoint spacelift
3. Spacelift errored out -- user need a password value set (a user password is write only attribute)

To get around this, options we talked about in person,

• user random_password resource and print out in spacelift console
• ensure new user resources have password set (but don't have it set on subsequent runs). Not sure how to get this to work in tf code off the top of my head - kick over to AI.

In the Google UI, you have the option of sending a one time password to the user's personal email for them to use. Can we get that same process working in the module?

[Gowiem]

@westonplatter good stuff.

Without research, I think the ideal experience we can create is use random_password, default change_password_at_next_login to true, and then output the passwords.

That set of defaults will be problematic for the import use-case... I'm not sure what to do there honestly. In that case, it would be ideal if password is passed for those users as null and maybe we can just advise consumers of this module to do that in the case of importing. I believe that's the best we can do.

Probably worth looking into the "sending one-time-pw email" in the provider, but let's not spend too much time on it.