Add aeon.co.jp

[tockrock]

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

for password-rules.json

• The given rule isn't particularly standard and obvious for password managers
• Generated passwords have been tested from this rule using the Password Rules Validation Tool
• Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
  

半角英数字・記号 8ケタ
使用可能な記号　# $ + - . / : = ? @ [ ] ^ _ | ~
※英字(または記号)・数字の各1文字以上の組み合わせ
※生年月日、電話番号、名前、カード番号、ID、メールアドレスと同じ文字列などは設定不可
※「000…」「aaa…」など、同じ英数字・記号は連続3文字まで利用可能（4文字以上は利用不可）

Translated:

Half-width alphanumeric & symbols, 8 characters
Usable symbols: # $ + - . / : = ? @ [ ] ^ _ | ~
*At least one letter (or symbol) and one numeral must be included in the combination.
*Strings that are the same as your birth date, telephone number, name, card number, ID, or email address cannot be set.
*The same letter, number, or symbol can be used consecutively up to 3 times (4 or more consecutive identical characters are not allowed).

(Half-width means non-2byte characters more or less)

• The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

for change-password-URLs.json

• There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
• The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state

[tockrock]

Fixed merge conflict. Is there anything I need to do to get this reviewed?

[tockrock]

Thanks!

[rmondello]

Thank you for the contribution, and very sorry about the delay!