Add aeon.co.jp

[tockrock]

Overall Checklist

• [x] I agree to the project's Developer Certificate of Origin
• [x] The top-level JSON objects are sorted alphabetically
• [x] There are no open pull requests for the same update

for password-rules.json

• [x] The given rule isn't particularly standard and obvious for password managers
• [x] Generated passwords have been tested from this rule using the Password Rules Validation Tool
• [x] Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)

  半角英数字・記号 8ケタ 使用可能な記号　# $ + - . / : = ? @ [ ] ^ _ | ~ ※英字(または記号)・数字の各1文字以上の組み合わせ ※生年月日、電話番号、名前、カード番号、ID、メールアドレスと同じ文字列などは設定不可 ※「000…」「aaa…」など、同じ英数字・記号は連続3文字まで利用可能（4文字以上は利用不可）

Translated:

Half-width alphanumeric & symbols, 8 characters Usable symbols: # $ + - . / : = ? @ [ ] ^ _ | ~ At least one letter (or symbol) and one numeral must be included in the combination. Strings that are the same as your birth date, telephone number, name, card number, ID, or email address cannot be set. *The same letter, number, or symbol can be used consecutively up to 3 times (4 or more consecutive identical characters are not allowed).

(Half-width means non-2byte characters more or less)

• [x] The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

for change-password-URLs.json

• [x] There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
• [x] The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state