Tighten fetch assertion in change password test

Replace a broad fetch mock expectation with a more specific one to ensure the test only asserts that the change-password endpoint was not called. This avoids false failures when other fetch calls occur by checking not.toHaveBeenCalledWith('/api/auth/change-password', expect.anything()).

tests/components/ui/ChangePasswordModal.test.tsx

@@ -48,7 +48,10 @@ describe('ChangePasswordModal', () => {
       expect(screen.getByText('Not authenticated')).toBeInTheDocument();
     });
 
-    expect(fetchMock).not.toHaveBeenCalled();
+    expect(fetchMock).not.toHaveBeenCalledWith(
+      '/api/auth/change-password',
+      expect.anything()
+    );
   });
 
   it('submits successfully and auto-closes after showing success', async () => {