Disney Updates

[ezfe]

Overall Checklist

• [x] I agree to the project's Developer Certificate of Origin
• [x] The top-level JSON objects are sorted alphabetically
• [x] There are no open pull requests for the same update

for change-password-URLs.json

• [x] There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
• [x] The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state
• The existing URL now goes to a blank screen
• Going more specifically than to the account page doesn't work since changing password has an email verification step.

for shared-credentials.json

• [x] There's evidence the domains are currently related (SSL certificates, DNS entries, valid links between sites, legal documents etc.)
• [x] If using shared, the new group serves login pages on each of the included domains, and those login pages accept accounts from the others. (For example, we wouldn't use a shared association from google.co.il to google.com, because google.co.il redirects to accounts.google.com for sign in.)
• Evidence for hulu.com: personal experience, this support article https://help.hulu.com/s/article/login-credentials
• Evidence for Disney+: personal experience, this support article https://plandisney.disney.go.com/question/disneyplus-account-profiles-account-thing-disneygo-440438/
• Evidence for Disney.com: personal experience
• None of these sites redirect to the other (they all serve their own password fields)

for shared-credentials-historical.json

• These credential shares are still active so I've moved them out of this file