PR #4739 partially switched password hashing from SHA-512 to yescrypt, covering only the standalone password reset script (standalone_root_pw_reset) and the make_password_hash() function in utils/auth.py

Some scenarios still produce SHA-512 hashes via passlib.hosts.linux_context, which hardcodes sha512_crypt as its default and does not support yescrypt. Remaining places that still produce SHA-512 hashes:

• when a user sets a plaintext password via CLI (set system login user vyos authentication plaintext-password '')
• image installer produces hash of initial password
• OpenConnect VPN local user password hash (however password is stored plain-text in config)

Note: passlib library is stalled at v1.7.4