Add password rule for wmata.com

[powellcj12]

Overall Checklist

• [x] I agree to the project's Developer Certificate of Origin
• [x] The top-level JSON objects are sorted alphabetically
• [x] There are no open pull requests for the same update

for password-rules.json

• [x] The given rule isn't particularly standard and obvious for password managers
• [x] Generated passwords have been tested from this rule using the Password Rules Validation Tool
• [x] Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• [x] The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

From the website's account creation page, it lists the following as the password requirements:

Your password is case-sensitive and must contain at least 8 characters, including letters, at least two numbers, and at least one of the following special characters !@#$%^&*~/"()_=+[]|,.?-.

The main quirk I encountered that wasn't already supported was the requirement of "at least two numbers" so that has been added here.

I did attempt to use generated passwords from the Password Rules Validation Tool, but per #685 it appears to be giving back invalid examples specifically about the requirement for multiple digits so I haven't been able to completely validate things.

[rmondello]

@powellcj12 Thank you for the contribution and for the bug report about the Validation Tool!