Update password-rules.json for cardcash.com

[new-mexico-worm-farmer]

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

for password-rules.json

• The given rule isn't particularly standard and obvious for password managers
• Generated passwords have been tested from this rule using the Password Rules Validation Tool
• Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

This website requires a special character but doesn't count - so the out-of-the-box password generation behavior for Apple Passwords doesn't create a password acceptable to the website. Verified with three passwords generated by the validation tool.

[rmondello]

Thanks @new-mexico-worm-farmer!