Add patches for PHP 8.4+ deprecations in activities, password_policy and login_security

Problem/Motivation

seeds_security requires activities, password_policy and login_security. Their latest releases (activities 1.0.4, password_policy 4.0.3, login_security 2.0.7) still raise PHP 8.4+ deprecations: "Implicitly marking parameter ... as nullable is deprecated". Fixes exist upstream but are not released yet.

Steps to reproduce

Run PHP 8.4 or newer with error_reporting set to E_ALL and lint or load these files:

• activities: ActivitiesLogger::prepareUser() and ActivitiesLoggerInterface::log() ($account)
• password_policy: PolicyConfiguration::create() ($migration)
• login_security: LoginSecurityTrack::create() ($migration)

Proposed resolution

Add the upstream patches to extra.patches in composer.json:

• drupal/activities: https://git.drupalcode.org/projec0525e7c853e2063a18aa52e2ccd73df72.patch
• drupal/password_policy: https://git.drupalcode.org/pit/de0bf1314a872e24c7566a54af5bd89299726c06....
• drupal/login_security (second entry next to the exis
  https://git.drupalcode.org/project/login_security/-/comm7426b3a2fc49f4.p...

The patched files lint clean on PHP 8.5.

Remaining tasks

Review and merge. Remove each patch once the module r

User interface changes

None.

API changes

None.

Data model changes

None.