React Hook Form + Zod with inline error messaging.
Validation runs on blur; submit is blocked until the schema passes.
At least 8 characters with one uppercase letter and one number.