[protosync] Server-side -> client

Sync server-side changes from
https://critique.corp.google.com/#review/241808688 to client.

Bug: 941489
Change-Id: I9df671bd6e28a0fdf5b1f32178b40037052eb391
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1559087
Auto-Submit: Alexander Hendrich <hendrich@chromium.org>
Reviewed-by: Roman Sorokin [CET] <rsorokin@chromium.org>
Commit-Queue: Roman Sorokin [CET] <rsorokin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#649176}

components/policy/proto/device_management_backend.proto

@@ -563,6 +563,12 @@ message PolicyData {
   // belongs to. This is domain metadata included in a device policy response,
   // but it is not an explicit device policy.
   optional CustomerLogo customer_logo = 31;
+
+  // b/129771193
+  // This setting is from SingleSignOnSettingsProto#change_password_uri
+  // http://google3/ccc/hosted/policies/services/common/sso_settings.proto?l=48&rcl=241246111
+  // This field is currently only set for User Policy response.
+  optional string change_password_uri = 32;
 }
 
 message PolicyFetchResponse {