GHSA-qgg8-6p8q-vrp7: weak key derivation in rotki before 1.44.2

rotki before version 1.44.2 contains a weak key derivation vulnerability. The premium sync key is a single unsalted SHA-256 hash of the user password, allowing attackers who obtain an uploaded backup blob to perform GPU-parallel offline password guessing.